CVE-2022-3478 in GitLab

الملخص

بحسب MITRE • 26/01/2023

An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions starting from 15.6 before 15.6.1. It was possible to trigger a DoS attack by uploading a malicious nuget package.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• مسؤول: GitLab Inc.
• حجز: 13/10/2022
• إفشاء: 26/01/2023
• الاعتدال: تمت الموافقة
• إدخال: VDB-219369
• CPE: جاهز
• CWE: CWE-404 (مؤكد)
• CVSS: 4.3 (CNA)
• EPSS: 0.01021
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Pharma, Finance, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-3478
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-3478
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-3478/