{
  "resultsPerPage": 1,
  "startIndex": 0,
  "totalResults": 1,
  "format": "NVD_CVE",
  "version": "2.0",
  "timestamp": "2023-11-12T11:42:05.880",
  "vulnerabilities": [
    {
      "cve": {
        "id": "CVE-2022-1954",
        "sourceIdentifier": "cve@gitlab.com",
        "published": "2022-07-01T18:15:08.570",
        "lastModified": "2023-08-08T14:22:24.967",
        "vulnStatus": "Analyzed",
        "descriptions": [
          {
            "lang": "en",
            "value": "A Regular Expression Denial of Service vulnerability in GitLab CE\/EE affecting all versions from 1.0.2 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker to make a GitLab instance inaccessible via specially crafted web server response headers"
          },
          {
            "lang": "es",
            "value": "Una vulnerabilidad de Denegación de Servicio por Expresiones Regulares en GitLab CE\/EE que afecta a todas las versiones desde la 1.0.2 anteriores a 14.10.5, la 15.0 anteriores a 15.0.4 y la 15.1 anteriores a 15.1.1, permite a un atacante hacer inaccesible una instancia de GitLab por medio de encabezados de respuesta del servidor web especialmente diseñadas"
          }
        ],
        "metrics": {
          "cvssMetricV31": [
            {
              "source": "nvd@nist.gov",
              "type": "Primary",
              "cvssData": {
                "version": "3.1",
                "vectorString": "CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:N\/I:N\/A:L",
                "attackVector": "NETWORK",
                "attackComplexity": "LOW",
                "privilegesRequired": "NONE",
                "userInteraction": "NONE",
                "scope": "UNCHANGED",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "availabilityImpact": "LOW",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 1.4
            },
            {
              "source": "cve@gitlab.com",
              "type": "Secondary",
              "cvssData": {
                "version": "3.1",
                "vectorString": "CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:U\/C:N\/I:N\/A:L",
                "attackVector": "NETWORK",
                "attackComplexity": "LOW",
                "privilegesRequired": "LOW",
                "userInteraction": "NONE",
                "scope": "UNCHANGED",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "availabilityImpact": "LOW",
                "baseScore": 4.3,
                "baseSeverity": "MEDIUM"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 1.4
            }
          ],
          "cvssMetricV2": [
            {
              "source": "nvd@nist.gov",
              "type": "Primary",
              "cvssData": {
                "version": "2.0",
                "vectorString": "AV:N\/AC:L\/Au:N\/C:N\/I:N\/A:P",
                "accessVector": "NETWORK",
                "accessComplexity": "LOW",
                "authentication": "NONE",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 5.0
              },
              "baseSeverity": "MEDIUM",
              "exploitabilityScore": 10.0,
              "impactScore": 2.9,
              "acInsufInfo": false,
              "obtainAllPrivilege": false,
              "obtainUserPrivilege": false,
              "obtainOtherPrivilege": false,
              "userInteractionRequired": false
            }
          ]
        },
        "weaknesses": [
          {
            "source": "nvd@nist.gov",
            "type": "Primary",
            "description": [
              {
                "lang": "en",
                "value": "CWE-1333"
              }
            ]
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "operator": "OR",
                "negate": false,
                "cpeMatch": [
                  {
                    "vulnerable": true,
                    "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                    "versionStartIncluding": "1.0.2",
                    "versionEndExcluding": "14.10.5",
                    "matchCriteriaId": "333553F3-B222-4B31-939E-0A753F181E1D"
                  },
                  {
                    "vulnerable": true,
                    "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                    "versionStartIncluding": "1.0.2",
                    "versionEndExcluding": "14.10.5",
                    "matchCriteriaId": "9DC186FA-BBBB-441D-B33D-A827D71BDFCD"
                  },
                  {
                    "vulnerable": true,
                    "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
                    "versionStartIncluding": "15.0.0",
                    "versionEndExcluding": "15.0.4",
                    "matchCriteriaId": "59BC7D90-71FE-4551-BC55-2CBDD7F037C3"
                  },
                  {
                    "vulnerable": true,
                    "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
                    "versionStartIncluding": "15.0.0",
                    "versionEndExcluding": "15.0.4",
                    "matchCriteriaId": "18F6B2F9-8BDA-41C7-8152-70D61CCCC0B8"
                  },
                  {
                    "vulnerable": true,
                    "criteria": "cpe:2.3:a:gitlab:gitlab:15.1.0:*:*:*:community:*:*:*",
                    "matchCriteriaId": "0CE56232-8EF7-428C-90F2-85803A66B664"
                  },
                  {
                    "vulnerable": true,
                    "criteria": "cpe:2.3:a:gitlab:gitlab:15.1.0:*:*:*:enterprise:*:*:*",
                    "matchCriteriaId": "E07D39FA-8428-4585-9A4C-55D2A1799F9E"
                  }
                ]
              }
            ]
          }
        ],
        "references": [
          {
            "url": "https:\/\/gitlab.com\/gitlab-org\/cves\/-\/blob\/master\/2022\/CVE-2022-1954.json",
            "source": "cve@gitlab.com",
            "tags": [
              "Vendor Advisory"
            ]
          },
          {
            "url": "https:\/\/gitlab.com\/gitlab-org\/gitlab\/-\/issues\/358160",
            "source": "cve@gitlab.com",
            "tags": [
              "Broken Link"
            ]
          },
          {
            "url": "https:\/\/hackerone.com\/reports\/1531958",
            "source": "cve@gitlab.com",
            "tags": [
              "Permissions Required",
              "Third Party Advisory"
            ]
          }
        ]
      }
    }
  ]
}