CVE-2022-2499

🗓️ 05 Aug 2022 15:09:33Reported by GitLabType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 108 Views

GitLab EE versions 13.10 to 15.2.1 Jira integration insecure direct object reference vulnerability

Reporter	Title	Published	Views	Family All 18
FreeBSD	Gitlab -- multiple vulnerabilities	28 Jul 202200:00	–	freebsd
ATTACKERKB	CVE-2022-2499	5 Aug 202216:15	–	attackerkb
Circl	CVE-2022-2499	5 Aug 202220:20	–	circl
CNNVD	GitLab CE/EE 安全漏洞	29 Jul 202200:00	–	cnnvd
Cvelist	CVE-2022-2499	5 Aug 202215:09	–	cvelist
Debian CVE	CVE-2022-2499	5 Aug 202215:09	–	debiancve
EUVD	EUVD-2022-34757	3 Oct 202520:07	–	euvd
Tenable Nessus	FreeBSD : Gitlab -- multiple vulnerabilities (4c26f668-0fd2-11ed-a83d-001b217b3468)	30 Jul 202200:00	–	nessus
Tenable Nessus	GitLab 13.10 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2499)	4 Aug 202200:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2022-2499	26 Aug 202500:00	–	nessus

NVD

Vulners

Node

gitlab gitlabRange13.10.0–15.0.5enterprise

gitlab gitlabRange15.1.0–15.1.4enterprise

gitlab gitlabMatch15.2enterprise

[
  {
    "product": "GitLab",
    "vendor": "GitLab",
    "versions": [
      {
        "status": "affected",
        "version": ">=13.10, <15.0.5"
      },
      {
        "status": "affected",
        "version": ">=15.1, <15.1.4"
      },
      {
        "status": "affected",
        "version": ">=15.2, <15.2.1"
      }
    ]
  }
]

Source	Link
hackerone	www.hackerone.com/reports/1538068
gitlab	www.gitlab.com/gitlab-org/gitlab/-/issues/360800
gitlab	www.gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2499.json