CVE-2022-2761

Published: Nov 9, 2022Modified: Nov 21, 2024

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

An information disclosure issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to use GitLab Flavored Markdown (GFM) references in a Jira issue to disclose the names of resources they don't have access to.

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 13.9.0 to 15.3.5
Gitlab Gitlab	From 15.4.0 to 15.4.4
Gitlab Gitlab	From 15.5.0 to 15.5.2
Gitlab Gitlab	From 13.9.0 to 15.3.5
Gitlab Gitlab	From 15.4.0 to 15.4.4
Gitlab Gitlab	From 15.5.0 to 15.5.2