AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-2592

MEDIUM · CVSS 6.5 EPSS 1.10%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-10-17 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2022-2592
Severity
MEDIUM
CVSS
6.5
EPSS
1.10%
GitLab

Original NVD Description

A lack of length validation in Snippet descriptions in GitLab CE/EE affecting all versions prior to 15.1.6, 15.2 prior to 15.2.4 and 15.3 prior to 15.3.2 allows an authenticated attacker to create a maliciously large Snippet which when requested with or without authentication places excessive load on the server, potential leading to Denial of Service.