CVE-2022-4131: Medium severity gitlab vulnerability
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. An attacker may cause Denial of Service on a GitLab instance by exploiting a regex issue in how the application parses user agents.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-4131?
CVE-2022-4131 has been classified as a Denial of Service vulnerability.
How do I fix CVE-2022-4131?
To fix CVE-2022-4131, upgrade GitLab to version 15.5.7 or later, 15.6.4 or later, or 15.7.2 or later.
What versions are affected by CVE-2022-4131?
CVE-2022-4131 affects GitLab CE/EE versions from 10.8 to 15.5.7 and from 15.6 to 15.6.4 and from 15.7 to 15.7.2.
Can CVE-2022-4131 be exploited remotely?
Yes, CVE-2022-4131 can be exploited remotely, potentially leading to a Denial of Service.
Is there a workaround for CVE-2022-4131?
There are no known workarounds for CVE-2022-4131; updating to a patched version is recommended.