CVE-2022-1510

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-1510
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1510.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-1510
Aliases
Published
2022-05-11T15:15:09Z
Modified
2024-11-21T06:40:52Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly handling malicious text in the CI Editor and CI Pipeline details page allowing the attacker to cause uncontrolled resource consumption.

References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events