Medium severity4.3NVD Advisory· Published Oct 17, 2022· Updated Jun 17, 2026
CVE-2022-2908
CVE-2022-2908
Description
A potential DoS vulnerability was discovered in Gitlab CE/EE versions starting from 10.7 before 15.1.5, all versions starting from 15.2 before 15.2.3, all versions starting from 15.3 before 15.3.1 allowed an attacker to trigger high CPU usage via a special crafted input added in the Commit message field.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 2 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=10.7.0,<15.1.5
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=10.7.0,<15.1.5
- (no CPE)range: >=10.7, <15.1.5
- Range: >=10.7 <15.1.5, >=15.2 <15.2.3, >=15.3 <15.3.1
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2908.jsonnvdThird Party Advisory
- gitlab.com/gitlab-org/gitlab/-/issues/363734nvdThird Party Advisory
- hackerone.com/reports/1584156nvdPermissions RequiredThird Party Advisory
News mentions
0No linked articles in our index yet.