CVEvulnerability
CVE-2022-3285
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-11-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Bypass of healthcheck endpoint allow list affecting all versions from 12.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an unauthorized attacker to prevent access to GitLab
Affected configurations
• gitlab gitlab (>= 12.0.0 < 15.2.5)
• gitlab gitlab (>= 15.3.0 < 15.3.4)
• gitlab gitlab 15.4.0
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3285.json Vendor Advisory
- https://gitlab.com/gitlab-org/security/omnibus-gitlab/-/issues/64 Permissions Required, Vendor Advisory
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3285.json Vendor Advisory
- https://gitlab.com/gitlab-org/security/omnibus-gitlab/-/issues/64 Permissions Required, Vendor Advisory