CVE-2022-3514: Medium severity gitlab vulnerability
An issue has been discovered in GitLab CE/EE affecting all versions starting from 6.6 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. An attacker may cause Denial of Service on a GitLab instance by exploiting a regex issue in the submodule URL parser.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-3514?
The severity of CVE-2022-3514 is medium with a CVSS score of 5.3.
How does CVE-2022-3514 affect GitLab CE/EE?
CVE-2022-3514 affects all versions of GitLab CE/EE starting from 6.6 before 15.5.7, all versions starting from 15.6 before 15.6.4, and all versions starting from 15.7 before 15.7.2.
What is the vulnerability in CVE-2022-3514?
The vulnerability in CVE-2022-3514 is a regex issue in the submodule functionality of GitLab, which can be exploited by an attacker to cause Denial of Service (DoS) on a GitLab instance.
How can an attacker exploit CVE-2022-3514?
An attacker can exploit CVE-2022-3514 by exploiting the regex issue in the submodule functionality of GitLab to cause Denial of Service (DoS) on a GitLab instance.
Is there a fix available for CVE-2022-3514?
Yes, a fix for CVE-2022-3514 is available. It is recommended to update GitLab CE/EE to versions 15.5.7, 15.6.4, or 15.7.2 or later.