CVE-2022-2592

🗓️ 17 Oct 2022 00:00:00Reported by GitLabType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 70 Views

A lack of length validation in Snippet descriptions in GitLab CE/EE allows authenticated attacker to create a maliciously large Snippet, leading to Denial of Service

Reporter	Title	Published	Views	Family All 20
Circl	CVE-2022-2592	17 Oct 202222:57	–	circl
CNNVD	GitLab 输入验证错误漏洞	31 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-2592	17 Oct 202200:00	–	cvelist
Debian CVE	CVE-2022-2592	17 Oct 202200:00	–	debiancve
FreeBSD	Gitlab -- multiple vulnerabilities	30 Aug 202200:00	–	freebsd
EUVD	EUVD-2022-34840	3 Oct 202520:07	–	euvd
Tenable Nessus	FreeBSD : Gitlab -- multiple vulnerabilities (e6b994e2-2891-11ed-9be7-454b1dd82c64)	30 Aug 202200:00	–	nessus
Tenable Nessus	GitLab 12.9.8 < 15.1.6 / 15.2 < 15.2.4 / 15.3 < 15.3.2 (CVE-2022-2592)	3 Jan 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2022-2592	18 Aug 202500:00	–	nessus
NCSC	Vulnerabilities fixed in GitLab CE and EE	31 Aug 202200:00	–	ncsc

NVD

Vulners

Node

gitlab gitlabRange<15.1.6community

gitlab gitlabRange<15.1.6enterprise

gitlab gitlabRange15.2–15.2.4community

gitlab gitlabRange15.2–15.2.4enterprise

gitlab gitlabRange15.3–15.3.2community

gitlab gitlabRange15.3–15.3.2enterprise

[
  {
    "vendor": "GitLab",
    "product": "GitLab",
    "versions": [
      {
        "version": ">=12.9.8, <15.1.6",
        "status": "affected"
      },
      {
        "version": ">=15.2, <15.2.4",
        "status": "affected"
      },
      {
        "version": ">=15.3, <15.3.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
gitlab	www.gitlab.com/gitlab-org/gitlab/-/issues/362566
gitlab	www.gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2592.json
hackerone	www.hackerone.com/reports/1544507

13 May 2025 20:15Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.5

EPSS0.0039

SSVC

CWE-1284

cve-2022-2592 gitlab ce ee length validation snippet denial of service