An improper access control issue in GitLab CE/EE affecting all versions from 11.3 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allowed an unauthorized user to see release names even when releases we set to be restricted to project members only
References
| Link | Resource |
|---|---|
| https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3482.json | Vendor Advisory |
| https://gitlab.com/gitlab-org/gitlab/-/issues/377802 | Exploit Vendor Advisory |
| https://hackerone.com/reports/1725841 | Permissions Required Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
08 Aug 2023, 14:22
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-862 |
01 Feb 2023, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:15.6.0:*:*:*:enterprise:*:*:* cpe:2.3:a:gitlab:gitlab:15.6.0:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* |
|
| CWE | NVD-CWE-Other | |
| First Time |
Gitlab gitlab
Gitlab |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| References | (MISC) https://gitlab.com/gitlab-org/gitlab/-/issues/377802 - Exploit, Vendor Advisory | |
| References | (MISC) https://hackerone.com/reports/1725841 - Permissions Required, Third Party Advisory | |
| References | (CONFIRM) https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3482.json - Vendor Advisory |
26 Jan 2023, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-01-26 21:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-3482
Mitre link : CVE-2022-3482
CVE.ORG link : CVE-2022-3482
JSON object : View
Products Affected
gitlab
- gitlab
CWE
CWE-862
Missing Authorization