Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2022-4143
HistoryJun 28, 2023 - 9:15 p.m.

CVE-2022-4143

2023-06-2821:15:09
Google
osv.dev
10
gitlab
unauthorized access
cve-2022-4143
security issue

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

30.2%

JSON

An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 before 15.10.1 that allows for crafted, unapproved MRs to be introduced and merged without authorization

Related

osv 1
veracode 1
cvelist 1
prion 1
nessus 1
ubuntucve 1
cve 1
debiancve 1
nvd 1
osv
osv
BIT-gitlab-2022-4143
2024-03-06 11:13:25
veracode
veracode
Improper Authorization
2023-08-07 02:41:20
cvelist
cvelist
CVE-2022-4143
2023-06-28 00:00:00
prion
prion
Authorization
2023-06-28 21:15:00
nessus
nessus
GitLab 15.7 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2022-4143)
2024-05-17 00:00:00
ubuntucve
ubuntucve
CVE-2022-4143
2023-06-28 00:00:00
cve
cve
CVE-2022-4143
2023-06-28 21:15:09
debiancve
debiancve
CVE-2022-4143
2023-06-28 21:15:09
nvd
nvd
CVE-2022-4143
2023-06-28 21:15:09

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

30.2%

JSON
Related for OSV:CVE-2022-4143
osv1veracode1cvelist1prion1nessus1ubuntucve1cve1debiancve1nvd1