CVE Vulnerabilities

CVE-2022-3279

Improper Handling of Exceptional Conditions

Published: Oct 17, 2022 | Modified: Oct 20, 2022
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An unhandled exception in job log parsing in GitLab CE/EE affecting all versions prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an attacker to prevent access to job logs

Weakness

The product does not handle or incorrectly handles an exceptional condition.

Affected Software

Name Vendor Start Version End Version
Gitlab Gitlab * 15.2.5 (excluding)
Gitlab Gitlab 15.3 (including) 15.3.4 (excluding)
Gitlab Gitlab 15.4 (including) 15.4.1 (excluding)

References