CVE-2022-1510: High severity gitlab vulnerability
An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly handling malicious text in the CI Editor and CI Pipeline details page allowing the attacker to cause uncontrolled resource consumption.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1510?
CVE-2022-1510 has been categorized as a medium severity vulnerability.
How do I fix CVE-2022-1510?
To fix CVE-2022-1510, you should upgrade your GitLab instance to version 14.8.6 or later, or to version 14.9.4 or later.
What versions of GitLab are affected by CVE-2022-1510?
CVE-2022-1510 affects GitLab versions from 13.9 through to 14.8.6, from 14.9.0 to 14.9.4, and the version 14.10.0.
What type of attack does CVE-2022-1510 expose GitLab to?
CVE-2022-1510 exposes GitLab to potential cross-site scripting (XSS) attacks through improper handling of malicious text in the CI Editor.
Is there a workaround for CVE-2022-1510?
There is no specific workaround for CVE-2022-1510; upgrading to a patched version is strongly recommended.