CVE-2022-4138

Published: Feb 13, 2023Modified: Mar 21, 2025

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all versions starting from 15.7 before 15.7.6, and all versions starting from 15.8 before 15.8.1. An attacker could take over a project if an Owner or Maintainer uploads a file to a malicious project.

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	Before 15.6.7
Gitlab Gitlab	From 15.7 to 15.7.6
Gitlab Gitlab	From 15.8 to 15.8.1
Gitlab Gitlab	Before 15.6.7
Gitlab Gitlab	From 15.7 to 15.7.6
Gitlab Gitlab	From 15.8 to 15.8.1