CVE-2022-0093

Published: Jan 18, 2022Modified: Nov 21, 2024

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive information through RSS feeds.

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	Before 14.4.5
Gitlab Gitlab	From 14.5.0 to 14.5.3
Gitlab Gitlab	From 14.6.0 to 14.6.1
Gitlab Gitlab	Before 14.4.5
Gitlab Gitlab	From 14.5.0 to 14.5.3
Gitlab Gitlab	From 14.6.0 to 14.6.1