CVE-2022-0151

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was not correctly handling requests to delete existing packages which could result in a Denial of Service under specific conditions.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published
Jan 18, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-01526.5An issue has been discovered in GitLab affecting all versions starting from 13.10 before 14.4.5, all versions starting from 14.5.0 before 14CVE-2022-01537.5SQL Injection in GitHub repository forkcms/forkcms prior to 5.11.1.CVE-2022-01548.0An issue has been discovered in GitLab affecting all versions starting from 7.7 before 14.4.5, all versions starting from 14.5.0 before 14.5CVE-2022-01556.5follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized ActorCVE-2022-01565.5vim is vulnerable to Use After FreeCVE-2022-01575.4phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2022-01583.3vim is vulnerable to Heap-based Buffer OverflowCVE-2022-01595.4orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2022-01616.1The ARI Fancy Lightbox WordPress plugin before 1.3.9 does not sanitise and escape the msg parameter before outputting it back in an admin paCVE-2022-01629.8The vulnerability exists in TP-Link TL-WR841N V11 3.16.9 Build 160325 Rel.62500n wireless router due to transmission of authentication inforCVE-2022-01636.5The Smart Forms WordPress plugin before 2.6.71 does not have authorisation in its rednao_smart_forms_entries_list AJAX action, allowing any CVE-2022-01644.3The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not have authorisation and CSRF checks in its coming_soon_send_mail
CVE-2022-0151: Medium severity, CVSS 4.9 | Vulnix