MEDIUM

CVE-2022-0549

Gitlab GitLab 2022-03-28 CVSS v3.1

CVSS

6.5

Description

An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under certain conditions, GitLab REST API may allow unprivileged users to add other users to groups even if that is not possible to do through the Web UI.

EPSS Score

0.92%

Probability of exploitation in next 30 days

58.8th percentile

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0549.json Vendor Advisory https://gitlab.com/gitlab-org/gitlab/-/issues/342448 Exploit, Issue Tracking, Vendor Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE