CVE-2022-0477

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-0477
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-0477.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-0477
Aliases
Published
2022-04-25T16:35:06Z
Modified
2025-11-28T02:34:05.383643Z
Severity
  • 4.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

An issue has been discovered in GitLab affecting all versions starting from 11.9 before 14.5.4, all versions starting from 14.6.0 before 14.6.4, all versions starting from 14.7.0 before 14.7.1. GitLab was not correctly handling bulk requests to delete existing packages from the package registries which could result in a Denial of Service under specific conditions.

Database specific 
{
    "cna_assigner": "GitLab",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0477.json"
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
2f3536bdda88ae962d4f67ced68af6efd82254f1
Fixed
87a375d859ae8e1c8192e856ca0d75c6cfb24cc9
Database specific 
{
    "versions": [
        {
            "introduced": "11.9"
        },
        {
            "fixed": "14.5.4"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
518f728f72b10d07e8d7362ab6ddca7844e919ec
Fixed
149db5cd6f229be216050df6deaeb8482cf087db
Database specific 
{
    "versions": [
        {
            "introduced": "14.6.0"
        },
        {
            "fixed": "14.6.4"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
621e59848886e0dceec7a248ce6266450a7b5e21
Fixed
8d695f1158135f9d3837000833fed0888c6793ff
Database specific 
{
    "versions": [
        {
            "introduced": "14.7.0"
        },
        {
            "fixed": "14.7.1"
        }
    ]
}

Affected versions

v14.*

v14.6.0-ee
v14.6.1-ee
v14.6.2-ee
v14.6.3-ee
v14.7.0-ee