CVE-2022-1121
CVE-2022-1121
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A lack of appropriate timeouts in GitLab Pages included in GitLab CE/EE all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an attacker to cause unlimited resource consumption.
CVSS 5.3 · Medium · EPSS 1.1%
- Published
- Updated
Stack: system
Affected products and versions
gitlab pages
- Versions
- <14.7.7: Affected
- >=14.8, <14.8.5: Affected
- >=14.9, <14.9.2: Affected
No fix published
gitlab Ubuntu:16.04:LTS
- Versions
- 8.4.3+dfsg-9
- 8.4.3+dfsg-12
- 8.5.8+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published