Lucene search

K
osvGoogleOSV:BIT-GITLAB-2022-2907
HistoryMar 06, 2024 - 11:14 a.m.

BIT-gitlab-2022-2907

2024-03-0611:14:46
Google
osv.dev
3
gitlab
security
issue
unauthorised
user
repository
content
project
member
crafted link
version
software

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.4%

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. It was possible to read repository content by an unauthorised user if a project member used a crafted link.

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.4%