CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

CVE details

CVE-2022-1428

An issue has been discovered in GitLab affecting all versions before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was incorrectly verifying throttling limits for authenticated package requests which resulted in limits not being enforced.

Score
4.3 medium
Published
2022-05-11
Links
NVD · cve.org

Affected ports (1)

PortPackageVersionStatusMaintainer
devel/rubygem-gitlab_metarubygem-gitlab_meta7.0unaddressedruby@FreeBSD.org

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>rubygem-gitlab_meta</name>
	<range><lt>14.8.6</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>An issue has been discovered in GitLab affecting all versions before
	14.8.6, all versions starting from 14.9 before 14.9.4, all versions
	starting from 14.10 before 14.10.1. GitLab was incorrectly verifying
	throttling limits for authenticated package requests which resulted in
	limits not being enforced.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2022-1428</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2022-1428</url>
    </references>
    <dates>
      <discovery>2022-05-11</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>