An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly handling malicious text in the CI Editor and CI Pipeline details page allowing the attacker to cause uncontrolled resource consumption.
References
| Link | Resource |
|---|---|
| https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1510.json | Vendor Advisory |
| https://gitlab.com/gitlab-org/gitlab/-/issues/343276 | Broken Link |
| https://hackerone.com/reports/1353058 | Permissions Required Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
08 Aug 2023, 14:21
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-1333 |
18 May 2022, 17:42
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1510.json - Vendor Advisory | |
| References | (MISC) https://gitlab.com/gitlab-org/gitlab/-/issues/343276 - Broken Link | |
| References | (MISC) https://hackerone.com/reports/1353058 - Permissions Required, Third Party Advisory | |
| CWE | CWE-770 | |
| CPE | cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* cpe:2.3:a:gitlab:gitlab:14.10.0:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:14.10.0:*:*:*:enterprise:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
| First Time |
Gitlab
Gitlab gitlab |
11 May 2022, 15:18
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-05-11 15:15
Updated : 2023-12-10 14:22
NVD link : CVE-2022-1510
Mitre link : CVE-2022-1510
CVE.ORG link : CVE-2022-1510
JSON object : View
Products Affected
gitlab
- gitlab
CWE