A denial of service vulnerability when rendering RDoc files in GitLab CE/EE versions 10 to 14.7.7, 14.8.0 to 14.8.5, and 14.9.0 to 14.9.2 allows an attacker to crash the GitLab web application with a maliciously crafted RDoc file
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1185.json",
"cna_assigner": "GitLab"
}{
"source": "CPE_RANGE",
"cpe": [
"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*"
],
"extracted_events": [
{
"introduced": "10.0.0"
},
{
"fixed": "14.7.7"
},
{
"introduced": "14.8.0"
},
{
"fixed": "14.8.5"
},
{
"introduced": "14.9.0"
},
{
"fixed": "14.9.2"
}
]
}