BIT-gitlab-2022-2456

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/gitlab/BIT-gitlab-2022-2456.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-gitlab-2022-2456

Aliases

CVE-2022-2456

Published

2024-03-06T11:15:13Z

Modified

2026-09-10T16:01:33Z

Summary

[none]

Details

An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible for malicious group or project maintainers to change their corresponding group or project visibility by crafting a malicious POST request.

Database specific

{
    "cpes": [
        "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
        "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
        "cpe:2.3:a:gitlab:gitlab:15.2:*:*:*:community:*:*:*",
        "cpe:2.3:a:gitlab:gitlab:15.2:*:*:*:enterprise:*:*:*",
        "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
    ],
    "severity": "Medium"
}

References

Affected packages

Bitnami / gitlab

Package

Name: gitlab
Purl: pkg:bitnami/gitlab

Severity

4.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

15.0.5

Introduced

15.1.0

Fixed

15.1.4

Introduced

15.2.0

Fixed

15.2.1

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/gitlab/BIT-gitlab-2022-2456.json"