Fiche vulnérabilité
CVE-2022-3759 : faille moyenne GitLab GitLab (CVSS 4.3)
Description
An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. An attacker may upload a crafted CI job artifact zip file in a project that uses dynamic child pipelines and make a sidekiq job allocate a lot of memory. In GitLab instances where Sidekiq is memory-limited, this may cause Denial of Service.
En bref
- Sévérité
- Moyenne (CVSS 4.3)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
- Exploitation active
- Non signalée par la CISA
- Publication
- 13 févr. 2023
- Dernière mise à jour
- 21 mars 2025
Produits concernés
- GitLab GitLab