CVE-2022-1954: Medium severity gitlab vulnerability
A Regular Expression Denial of Service vulnerability in GitLab CE/EE affecting all versions from 1.0.2 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker to make a GitLab instance inaccessible via specially crafted web server response headers
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1954?
CVE-2022-1954 is classified as a Regular Expression Denial of Service vulnerability.
How do I fix CVE-2022-1954?
To fix CVE-2022-1954, update your GitLab instance to version 14.10.5, 15.0.4, or 15.1.1 or later.
Which versions are affected by CVE-2022-1954?
CVE-2022-1954 affects all versions of GitLab from 1.0.2 prior to 14.10.5, all versions from 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1.
What type of attack does CVE-2022-1954 enable?
CVE-2022-1954 enables an attacker to make a GitLab instance inaccessible via specially crafted web server response headers.
Is CVE-2022-1954 applicable to both GitLab CE and EE?
Yes, CVE-2022-1954 affects both GitLab Community Edition (CE) and Enterprise Edition (EE) versions.