VYPR
← All advisories
Medium severity4.3NVD Advisory· Published May 11, 2022· Updated Jun 17, 2026

CVE-2022-1428

CVE-2022-1428

Description

An issue has been discovered in GitLab affecting all versions before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was incorrectly verifying throttling limits for authenticated package requests which resulted in limits not being enforced.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • GitLab Inc./GitLab6 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 5 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: <14.8.6
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: <14.8.6
    • cpe:2.3:a:gitlab:gitlab:14.10.0:*:*:*:community:*:*:*
    • cpe:2.3:a:gitlab:gitlab:14.10.0:*:*:*:enterprise:*:*:*
    • (no CPE)range: <14.8.6, 14.9<14.9.4, 14.10<14.10.1
    • (no CPE)range: <14.8.6
  • osv-coords
    pkg:bitnami/gitlab
    Range: < 14.8.6

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.