CVE-2022-0489

CVE-2022-0489 is a denial-of-service vulnerability affecting all versions of GitLab CE/EE starting from 8.15. An authenticated attacker can trigger a denial of service by exploiting the math feature with a specific formula within issue comments. This medium-severity vulnerability has a CVSS score of 5.7, indicating low attack complexity and user interaction, with a high impact on availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, though it was addressed in a critical security release by GitLab.