CVE-2022-1680

🗓️ 06 Jun 2022 17:05:16Reported by GitLabType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 188 Views

Account takeover issue in GitLab EE, versions 11.10 to 15.0.

Reporter	Title	Published	Views	Family All 21
attackerkb	CVE-2022-1680	6 Jun 202218:15	–	attackerkb
BDU FSTEC	GitLab SCIM Account Takeover	7 Jun 202200:00	–	bdu_fstec
Circl	CVE-2022-1680	4 Jun 202212:03	–	circl
CNNVD	GitLab access control vulnerability	2 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-1680	6 Jun 202217:05	–	cvelist
FreeBSD	Gitlab -- multiple vulnerabilities	1 Jun 202200:00	–	freebsd
Tenable Nessus	FreeBSD : Gitlab -- multiple vulnerabilities (f414d69f-e43d-11ec-9ea4-001b217b3468)	4 Jun 202200:00	–	nessus
Tenable Nessus	GitLab 11.0 < 14.9.5 / 14.10.0 < 14.10.4 / 15.0.0 < 15.0.1 (CVE-2022-1680)	28 Jun 202200:00	–	nessus
Mend	CVE-2022-1680	6 Jun 202217:05	–	mend
NCSC	Vulnerabilities fixed in GitLab	3 Jun 202200:00	–	ncsc

NVD

Vulners

Node

gitlab gitlabRange11.10.0–14.9.5enterprise

gitlab gitlabRange14.10.0–14.10.4enterprise

gitlab gitlabMatch15.0.0enterprise

[
  {
    "product": "GitLab",
    "vendor": "GitLab",
    "versions": [
      {
        "status": "affected",
        "version": ">=15.0.0, <15.0.1"
      },
      {
        "status": "affected",
        "version": ">=14.10.0, <14.10.4"
      },
      {
        "status": "affected",
        "version": ">=11.0, <14.9.5"
      }
    ]
  }
]