CVE-2022-3818
Medium
Description
An uncontrolled resource consumption issue when parsing URLs in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to cause performance issues and potentially a denial of service on the GitLab instance.
SeverityMedium
CVSS5.3
Exploit probability—
Product
Gitlab
PublishedNov 10, 2022
First seenNov 10, 2022
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Update
- gitlab gitlab15.3.5, 15.4.4, 15.5.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gitlab gitlab | v < 15.3.5, 15.4.0 ≤ v < 15.4.4, 15.5.0 ≤ v < 15.5.2 | 15.3.5, 15.4.4, 15.5.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.