CVE-2022-2512

Published: Aug 5, 2022Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. Membership changes are not reflected in TODO for confidential notes, allowing a former project members to read updates via TODOs.

Affected (6)

Products: Gitlab: Gitlab

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 15.0.0 to 15.0.5
Gitlab Gitlab	From 15.1.0 to 15.1.4
Gitlab Gitlab	Version 15.2

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 15.0.0 to 15.0.5
Gitlab Gitlab	From 15.1.0 to 15.1.4
Gitlab Gitlab	Version 15.2

References (4)

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2512.json

Source: cve@gitlab.com

Vendor Advisory

https://gitlab.com/gitlab-org/gitlab/-/issues/365742

Source: cve@gitlab.com

Broken LinkVendor Advisory

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2512.json

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://gitlab.com/gitlab-org/gitlab/-/issues/365742

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkVendor Advisory

Timeline

No history available yet.