FreeBSD: VID-EE890BE3-A1EC-11ED-A81D-001B217B3468 (CVE-2022-3759): Gitlab -- Multiple Vulnerabilities

FreeBSD: VID-EE890BE3-A1EC-11ED-A81D-001B217B3468 (CVE-2022-3759): Gitlab -- Multiple Vulnerabilities

Severity

8

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Published

01/31/2023

Created

02/04/2023

Added

02/02/2023

Modified

01/28/2025

Description

Details for this vulnerability have not been published by NIST at this point. Descriptions from software vendor advisories for this issue are provided below.

From VID-EE890BE3-A1EC-11ED-A81D-001B217B3468:

Gitlab reports:

Denial of Service via arbitrarily large Issue descriptions

CSRF via file upload allows an attacker to take over a repository

Sidekiq background job DoS by uploading malicious CI job artifact zips

Sidekiq background job DoS by uploading a malicious Helm package

Solution(s)

• freebsd-upgrade-package-gitlab-ce

References

• CVE-2022-3759