VDB

CVE-2022-3613

CVE-2022-3613 PUBLISHED CVSS 7.5 HIGH

An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. A crafted Prometheus Server query can cause high resource consumption and may lead to Denial of Service.

EPSS 0.98% · 60.8th percentile

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.98%
60.8th percentile

Affected Products

VendorProductVersions
Bitnamigitlab0, 15.6.0, 15.7.0
Bitnamigitlab0, 15.6.0, 15.7.0

Timeline

  • Jul 1, 2022 CVE Published
  • Jan 12, 2023 EPSS Score
  • Jan 19, 2023 CVE Updated
  • Feb 22, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 5, 2023 EPSS Score
  • May 16, 2023 EPSS Score
  • Jun 27, 2023 EPSS Score
  • Aug 7, 2023 EPSS Score
  • Sep 17, 2023 EPSS Score
  • Dec 9, 2023 EPSS Score
  • Jan 20, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›