2 lines
4.5 KiB
JSON
2 lines
4.5 KiB
JSON
{"affected":[{"affectedData":[{"product":"GitLab","vendor":"GitLab","versions":[{"status":"affected","version":" <15.1.6"},{"status":"affected","version":">=15.2, <15.2.4"},{"status":"affected","version":">=15.3, <15.3.2"}]}],"source":"cve@gitlab.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","matchCriteriaId":"4AD3082E-EC31-4A5E-BADB-23D9AA1C64E1","versionEndExcluding":"15.1.6","vulnerable":true},{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","matchCriteriaId":"F398204C-DEBD-4A66-A404-FD350D454738","versionEndExcluding":"15.1.6","vulnerable":true},{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","matchCriteriaId":"3D749C09-7157-4B87-9232-8E32F05C6655","versionEndExcluding":"15.2.4","versionStartIncluding":"15.2","vulnerable":true},{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","matchCriteriaId":"B81CEDFB-EDCD-4298-8AEF-80C16422AE12","versionEndExcluding":"15.2.4","versionStartIncluding":"15.2","vulnerable":true},{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","matchCriteriaId":"72FB7E61-B73F-4BBA-A1B4-FAFC9F351858","versionEndExcluding":"15.3.2","versionStartIncluding":"15.3","vulnerable":true},{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","matchCriteriaId":"7D17D848-4F93-4E17-98E7-10DC30A5CCFE","versionEndExcluding":"15.3.2","versionStartIncluding":"15.3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. Malformed content added to the issue description could have been used to trigger high CPU usage."},{"lang":"es","value":"Se ha detectado una posible vulnerabilidad de DOS en GitLab CE/EE afectando todas las versiones anteriores a 15.1.6, todas las versiones a partir de 15.2 anteriores a 15.2.4 y a todas las versiones a partir de 15.3 anteriores a 15.3.2. El contenido malformado añadido a la descripción del problema podría haber sido usado para desencadenar un alto uso de la CPU"}],"id":"CVE-2022-2931","lastModified":"2026-06-17T04:42:50.537","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"cve@gitlab.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-2931","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-05-13T16:25:23.390059Z","version":"2.0.3"}}]},"published":"2022-10-17T16:15:21.580","references":[{"source":"cve@gitlab.com","tags":["Third Party Advisory"],"url":"https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2931.json"},{"source":"cve@gitlab.com","tags":["Third Party Advisory"],"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/361982"},{"source":"cve@gitlab.com","tags":["Permissions Required","Third Party Advisory"],"url":"https://hackerone.com/reports/1543718"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2931.json"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/361982"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"],"url":"https://hackerone.com/reports/1543718"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Third Party Advisory"],"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/361982"}],"sourceIdentifier":"cve@gitlab.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"}],"source":"nvd@nist.gov","type":"Primary"}]}
|