An unhandled exception in job log parsing in GitLab CE/EE affecting all versions prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an attacker to prevent access to job logs
Weakness
The product does not handle or incorrectly handles an exceptional condition.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gitlab | Gitlab | * | 15.2.5 (excluding) |
| Gitlab | Gitlab | 15.3 (including) | 15.3.4 (excluding) |
| Gitlab | Gitlab | 15.4 (including) | 15.4.1 (excluding) |
| Gitlab | Ubuntu | esm-apps/xenial | * |
| Gitlab | Ubuntu | trusty | * |
| Gitlab | Ubuntu | xenial | * |
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3279.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/364249
- https://hackerone.com/reports/1587261
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3279.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/364249
- https://hackerone.com/reports/1587261
- https://gitlab.com/gitlab-org/gitlab/-/issues/364249