CVE-2022-1193

Improper access control in GitLab CE/EE versions 10.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows a malicious actor to obtain details of the latest commit in a private project via Merge Requests under certain circumstances...

CVE-2022-1193

CVE-2022-1193 affects GitLab CE/EE: versions 10.7 before 14.7.7, 14.8 before 14.8.5, and 14.9 before 14.9.2. Root cause is improper access control, allowing a malicious actor to obtain details of the latest commit in a private project via Merge Requests under certain circumstances. Remediation pe...

GitLab 10.7.x < 14.7.7, 14.8.x < 14.8.5, 14.9.x < 14.9.2 Information Disclosure Vulnerability

GitLab is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...