NetSight
medium4.3

CVE-2022-1428

An issue has been discovered in GitLab affecting all versions before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 be…

Impact

An issue has been discovered in GitLab affecting all versions before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was incorrectly verifying throttling limits for authenticated package requests which resulted in limits not being enforced.

Affected products

VendorProductAffected versions
GitlabGitlab
before 14.8.6
from 14.9.0 before 14.9.4
Version 14.10.0

Weakness classification

References