Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2022-3279
HistoryOct 17, 2022 - 4:15 p.m.

CVE-2022-3279

2022-10-1716:15:22
Debian Security Bug Tracker
security-tracker.debian.org
15
gitlab ce/ee
version 15.4.1
job log parsing
unhandled exception
prevent access

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

44.8%

An unhandled exception in job log parsing in GitLab CE/EE affecting all versions prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an attacker to prevent access to job logs

OSVersionArchitecturePackageVersionFilename
Debian999allgitlab< 15.10.8+ds1-2gitlab_15.10.8+ds1-2_all.deb

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

44.8%