| |
Vulnerability CVE-2022-1174
Published: 2022-04-04
| Description: |
A potential DoS vulnerability was discovered in Gitlab CE/EE versions 13.7 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 allowed an attacker to trigger high CPU usage via a special crafted input added in Issues, Merge requests, Milestones, Snippets, Wiki pages, etc. |
Type:
CWE-400 (Uncontrolled Resource Consumption ('Resource Exhaustion'))
CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:P)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
5/10 |
2.9/10 |
10/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Low |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
None |
None |
Partial |
References: |
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1174.json
https://gitlab.com/gitlab-org/gitlab/-/issues/338721
https://hackerone.com/reports/1305431
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
