CVE-2022-3331

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-3331
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3331.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-3331
Aliases
Published
2022-10-17T00:00:00Z
Modified
2025-12-04T11:48:34.561099Z
Severity
  • 3.5 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. GitLab's Zentao integration has an insecure direct object reference vulnerability that may be exploited by an attacker to leak Zentao project issues.

Database specific 
{
    "cna_assigner": "GitLab",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3331.json"
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
490a8efda84a04e31ac41b882d95bb717c202437
Fixed
e3fcea907325032eeaa732b45d404a26e6310018
Database specific 
{
    "versions": [
        {
            "introduced": "14.5"
        },
        {
            "fixed": "15.1.6"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
d836c22d87f6f0397b93cc72ce3af27a6dc02d93
Fixed
e04b0a6dd2a14f79ac08d66fea184314051a1669
Database specific 
{
    "versions": [
        {
            "introduced": "15.2"
        },
        {
            "fixed": "15.2.4"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
b189ba070558de141d90142340de25bd3edcbefc
Fixed
e2ffae9620a2f88ebff56d17b26046f292aef85a
Database specific 
{
    "versions": [
        {
            "introduced": "15.3"
        },
        {
            "fixed": "15.3.2"
        }
    ]
}

Affected versions

v15.*

v15.2.0-ee
v15.2.1-ee
v15.2.2-ee
v15.2.3-ee
v15.3.0-ee
v15.3.1-ee