CVEvulnerability
CVE-2022-1111
2.7 LOW
Official page ↗
- Status
- Modified
- Published
- 2022-04-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 2.4 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
- CVSS 3.1 ([email protected])
- 2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
Description
A business logic error in Project Import in GitLab CE/EE versions 14.9 prior to 14.9.2, 14.8 prior to 14.8.5, and 14.0 prior to 14.7.7 under certain conditions caused imported projects to show an incorrect user in the 'Access Granted' column in the project membership pages
Affected configurations
• gitlab gitlab (>= 14.0.0 < 14.7.7)
• gitlab gitlab (>= 14.8.0 < 14.8.5)
• gitlab gitlab (>= 14.9.0 < 14.9.2)
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1111.json Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab/-/issues/345236 Broken Link
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1111.json Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab/-/issues/345236 Broken Link