CVE-2022-0344

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-0344
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-0344.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-0344
Aliases
Downstream
Published
2022-03-28T18:53:07Z
Modified
2025-12-04T11:32:08.228699Z
Severity
  • 3.1 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting from 10.1 before 14.6.4, all versions starting from 10.2 before 14.7.1. Private project paths can be disclosed to unauthorized users via system notes when an Issue is closed via a Merge Request and later moved to a public project

Database specific 
{
    "cna_assigner": "GitLab",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0344.json"
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
235b8d50ad14e7cdf4bc61c3df070f38dee97974
Fixed
87a375d859ae8e1c8192e856ca0d75c6cfb24cc9
Database specific 
{
    "versions": [
        {
            "introduced": "10.0"
        },
        {
            "fixed": "14.5.4"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
518f728f72b10d07e8d7362ab6ddca7844e919ec
Fixed
149db5cd6f229be216050df6deaeb8482cf087db
Database specific 
{
    "versions": [
        {
            "introduced": "14.6"
        },
        {
            "fixed": "14.6.4"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
621e59848886e0dceec7a248ce6266450a7b5e21
Fixed
8d695f1158135f9d3837000833fed0888c6793ff
Database specific 
{
    "versions": [
        {
            "introduced": "14.7"
        },
        {
            "fixed": "14.7.1"
        }
    ]
}

Affected versions

v14.*

v14.6.0-ee
v14.6.1-ee
v14.6.2-ee
v14.6.3-ee
v14.7.0-ee