Home Tools CVE CVE-2022-4205
HIGH

CVE-2022-4205

Gitlab GitLab 2023-01-27 CVSS v3.1
CVSS
7.5

Description

In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash.

Weakness (CWE)

CWE-843 Type Confusion

EPSS Score

0.6%
Probability of exploitation in next 30 days
47.5th percentile

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4205.json Vendor Advisory https://gitlab.com/gitlab-org/gitlab/-/issues/374082 Exploit, Issue Tracking, Vendor Advisory
View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE