CVE-2022-2534

Published: Aug 5, 2022Modified: Nov 21, 2024

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. GitLab was returning contributor emails due to improper data handling in the Datadog integration.

Affected (6)

Products: Gitlab: Gitlab

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 15.1.0 to 15.1.4
Gitlab Gitlab	From 9.3.0 to 15.0.5
Gitlab Gitlab	Version 15.2

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 15.1.0 to 15.1.4
Gitlab Gitlab	From 9.3.0 to 15.0.5
Gitlab Gitlab	Version 15.2

References (4)

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2534.json

Source: cve@gitlab.com

Vendor Advisory

https://gitlab.com/gitlab-org/gitlab/-/issues/361654

Source: cve@gitlab.com

Broken LinkVendor Advisory

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2534.json

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://gitlab.com/gitlab-org/gitlab/-/issues/361654

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkVendor Advisory

Timeline

No history available yet.