CVE-2022-1936

🗓️ 06 Jun 2022 16:54:22Reported by GitLabType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 123 Views

Incorrect authorization in GitLab EE allows misuse of valid Project Deploy Toke

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2022-1936	6 Jun 202220:30	–	circl
CNNVD	GitLab 授权问题漏洞	2 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-1936	6 Jun 202216:54	–	cvelist
Debian CVE	CVE-2022-1936	6 Jun 202216:54	–	debiancve
EUVD	EUVD-2022-25205	3 Oct 202520:07	–	euvd
FreeBSD	Gitlab -- multiple vulnerabilities	1 Jun 202200:00	–	freebsd
Tenable Nessus	FreeBSD : Gitlab -- multiple vulnerabilities (f414d69f-e43d-11ec-9ea4-001b217b3468)	4 Jun 202200:00	–	nessus
Tenable Nessus	GitLab 12.0.0 < 14.9.5 / 14.10.0 < 14.10.4 / 15.0.0 < 15.0.1 (CVE-2022-1936)	2 Jan 202400:00	–	nessus
NCSC	Vulnerabilities fixed in GitLab	3 Jun 202200:00	–	ncsc
NVD	CVE-2022-1936	6 Jun 202217:15	–	nvd

NVD

Vulners

Node

gitlab gitlabRange12.0.0–14.9.5enterprise

gitlab gitlabRange14.10.0–14.10.4enterprise

gitlab gitlabMatch15.0.0enterprise

[
  {
    "product": "GitLab",
    "vendor": "GitLab",
    "versions": [
      {
        "status": "affected",
        "version": ">=15.0.0, <15.0.1"
      },
      {
        "status": "affected",
        "version": ">=14.10.0, <14.10.4"
      },
      {
        "status": "affected",
        "version": ">=12.0.0, <14.9.5"
      }
    ]
  }
]