CVE-2022-0489 - An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15

Back Back to CVE browser

MEDIUM

An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15

Published Apr 1, 2022

5.7

MEDIUM

CVSS 3.1

EPSS 1.49%

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a DOS by using the math feature with a specific formula in issue comments.

Affected products

Vendor GitLab Product GitLab Default
n/a
- Version
  >=14.7, <14.7.4
  Status
  affected
  Constraints
  -
- Version
  >=14.8, <14.8.2
  Status
  affected
  Constraints
  -
- Version
  >=8.15, <14.6.5
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

GitLab

n/a

Version	Status	Constraints
>=14.7, <14.7.4	affected	-
>=14.8, <14.8.2	affected	-
>=8.15, <14.6.5	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-15626
Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0489.json
x_refsource_CONFIRMThird Party Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/341832
x_refsource_MISCExploitPatchThird Party Advisory
https://hackerone.com/reports/1350793
x_refsource_MISCPermissions RequiredThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-15626		Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0489.json		x_refsource_CONFIRMThird Party Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/341832		x_refsource_MISCExploitPatchThird Party Advisory
https://hackerone.com/reports/1350793		x_refsource_MISCPermissions RequiredThird Party Advisory