CVE-2019-15722: High severity gitlab vulnerability
Published Sep 16, 2019
·Updated
An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.2.1. Particular mathematical expressions in GitLab Markdown can exhaust client resources.
Affected Software
6 affected components
GitLab GitLab>=8.15.0<12.0.8
GitLab GitLab>=8.15.0<12.0.8
GitLab GitLab>=12.1.0<12.1.8
GitLab GitLab>=12.1.0<12.1.8
GitLab GitLab>=12.2.0<12.2.3
GitLab GitLab>=12.2.0<12.2.3
Event History
Sep 16, 2019
CVE Published
via MITRE·04:45 PM
Data Sourced
via MITRE·04:45 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-15722?
CVE-2019-15722 has a medium severity rating due to its potential to exhaust client resources.
2
How do I fix CVE-2019-15722?
To fix CVE-2019-15722, upgrade your GitLab installation to version 12.2.3 or later.
3
Which versions of GitLab are affected by CVE-2019-15722?
CVE-2019-15722 affects GitLab Community and Enterprise Editions from version 8.15 to version 12.2.1.
4
What impacts does CVE-2019-15722 have on users?
CVE-2019-15722 can cause performance issues by exhausting client resources when rendering specific Markdown expressions.
5
Is there a patch available for CVE-2019-15722?
Yes, a patch is available in GitLab version 12.2.3 and later to address CVE-2019-15722.