CVE-2022-4376

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-4376
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4376.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-4376
Aliases
Related
Published
2023-05-03T22:15:15Z
Modified
2024-11-21T07:35:09Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Under certain conditions, an attacker may be able to map a private email of a GitLab user to their GitLab account on an instance.

References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events