5.3
Medium
CVE-2022-1121 A lack of appropriate timeouts in GitLab Pages included in GitLab CE/EE all versions prior to 14.7.7, 14.8 prior to…
Description
A lack of appropriate timeouts in GitLab Pages included in GitLab CE/EE all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an attacker to cause unlimited resource consumption.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GitLab Pages 14.9 | 14.9 → < 14.9.2 | 14.9.2 |
| GitLab Pages 14.8 | 14.8 → < 14.8.5 | 14.8.5 |
| GitLab Pages 14.7 | earliest → < 14.7.7 | 14.7.7 |
References
- gitlab.com gitlab.com
- gitlab.com gitlab.com
Timeline
- Published
- Last modified