CVE-2022-3351

Published: Oct 17, 2022Modified: Nov 21, 2024

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

An issue has been discovered in GitLab EE affecting all versions starting from 13.7 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. A user's primary email may be disclosed to an attacker through group member events webhooks.

Affected (3)

Products: Gitlab: Gitlab

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 13.7.0 to 15.2.5
Gitlab Gitlab	From 15.3 to 15.3.4
Gitlab Gitlab	From 15.4 to 15.4.1

References (6)

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3351.json

Source: cve@gitlab.com

Vendor Advisory

https://gitlab.com/gitlab-org/gitlab/-/issues/364266

Source: cve@gitlab.com

Broken LinkVendor Advisory

https://hackerone.com/reports/1446022

Source: cve@gitlab.com

Permissions RequiredThird Party Advisory

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3351.json

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://gitlab.com/gitlab-org/gitlab/-/issues/364266

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkVendor Advisory

https://hackerone.com/reports/1446022

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party Advisory

Timeline

No history available yet.