Servers and applications
CVE-2022-2592
A lack of length validation in Snippet descriptions in GitLab CE/EE affecting all versions prior to 15.1.6, 15.2 prior to 15.2.4 and 15.3 prior to 15.3.2 allows an authenticated attacker to create a maliciously large Snippet which when requested with or without authentication places excessive load on the server, potential leading to Denial of Service.
- Severity
- Medium 6.5
- Published
- 17 Oct 2022
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 15.1.6, 15.2.4, 15.3.2
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
GitLabServers and applications · cpe:a:gitlab:gitlab |
|