CVE-2022-3639
Last modified
CVE-2022-3639 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 10.8 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. Improper data handling on branch creation could have been used to trigger high CPU usage.. EPSS estimates a 0.84% chance of exploitation in the next 30 days.
Description
A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 10.8 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. Improper data handling on branch creation could have been used to trigger high CPU usage.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gitlab | Gitlab | >= 10.8.0, < 15.1.6 |
| Gitlab | Gitlab | >= 15.2, < 15.2.4 |
| Gitlab | Gitlab | >= 15.3, < 15.3.2 |
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3639.jsonThird Party Advisory, VDB Entry
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3639.jsonThird Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-3639?
How severe is CVE-2022-3639?
How do I fix CVE-2022-3639?
Are you affected by CVE-2022-3639?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST