MEDIUM

CVE-2022-0152

Gitlab GitLab 2022-01-18 CVSS v3.1

CVSS

6.5

Description

An issue has been discovered in GitLab affecting all versions starting from 13.10 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was vulnerable to unauthorized access to some particular fields through the GraphQL API.

Weakness (CWE)

CWE-862 Missing Authorization

EPSS Score

1.14%

Probability of exploitation in next 30 days

65.2th percentile

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0152.json Third Party Advisory https://gitlab.com/gitlab-org/gitlab/-/issues/347467 Exploit, Third Party Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE