CVEvulnerability
CVE-2022-3482
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-01-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-862
Description
An improper access control issue in GitLab CE/EE affecting all versions from 11.3 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allowed an unauthorized user to see release names even when releases we set to be restricted to project members only
Affected configurations
• gitlab gitlab (>= 11.3.0 < 15.4.6)
• gitlab gitlab (>= 15.5.0 < 15.5.5)
• gitlab gitlab 15.6.0
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3482.json Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab/-/issues/377802 Exploit, Vendor Advisory
- https://hackerone.com/reports/1725841 Permissions Required, Third Party Advisory
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3482.json Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab/-/issues/377802 Exploit, Vendor Advisory
- https://hackerone.com/reports/1725841 Permissions Required, Third Party Advisory