CVEvulnerability
CVE-2022-3283
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-10-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-400
Description
A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 While cloning an issue with special crafted content added to the description could have been used to trigger high CPU usage.
Affected configurations
• gitlab gitlab (< 15.2.5)
• gitlab gitlab (>= 15.3 < 15.3.4)
• gitlab gitlab (>= 15.4 < 15.4.1)
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3283.json Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab/-/issues/361982 Exploit, Issue Tracking, Vendor Advisory
- https://hackerone.com/reports/1543718 Permissions Required, Third Party Advisory
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3283.json Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab/-/issues/361982 Exploit, Issue Tracking, Vendor Advisory
- https://hackerone.com/reports/1543718 Permissions Required, Third Party Advisory