CVE-2022-1783

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-1783
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1783.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-1783
Aliases
Published
2022-06-06T17:00:32Z
Modified
2026-04-10T04:42:53.086782Z
Severity
  • 2.7 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
[none]
Details

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1. It may be possible for malicious group maintainers to add new members to a project within their group, through the REST API, even after their group owner enabled a setting to prevent members from being added to projects within that group.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1783.json",
    "cna_assigner": "GitLab"
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
3b397c1753233301037d0ca3caae23ce116505d3
Fixed
d69f38d4a95eb664a8987247b61d8d1130c9f94a
Database specific 
{
    "versions": [
        {
            "introduced": "15.0.0"
        },
        {
            "fixed": "15.0.1"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
ad109bc62af12e7a4e8da0a93255cf7d795705a0
Fixed
94a44086fe6f7c511db20bc89b779e3e46bf6b55
Database specific 
{
    "versions": [
        {
            "introduced": "14.10.0"
        },
        {
            "fixed": "14.10.4"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
dec73e99fddac59c0bf816dc4bffd2a30abae6de
Fixed
661f7e4160fd380b54f36039b0e7f585b4cdb647
Database specific 
{
    "versions": [
        {
            "introduced": "14.3"
        },
        {
            "fixed": "14.9.5"
        }
    ]
}

Affected versions

v14.*
v14.10.0-ee
v14.10.2-ee
v14.10.3-ee
v15.*
v15.0.0-ee

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1783.json"