NetSight
medium5.3

CVE-2022-1121

A lack of appropriate timeouts in GitLab Pages included in GitLab CE/EE all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an …

Impact

A lack of appropriate timeouts in GitLab Pages included in GitLab CE/EE all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an attacker to cause unlimited resource consumption.

Affected products

VendorProductAffected versions
GitlabGitlab
before 14.7.7
from 14.8.0 before 14.8.5
from 14.9.0 before 14.9.2

Weakness classification

References