Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-3279
HistoryOct 17, 2022 - 12:00 a.m.

CVE-2022-3279

2022-10-1700:00:00
ubuntu.com
ubuntu.com
18
gitlab ce/ee
job log parsing
versions prior to 15.4.1
unhandled exception

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

44.8%

An unhandled exception in job log parsing in GitLab CE/EE affecting all
versions prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1
allows an attacker to prevent access to job logs

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

44.8%