GitLab 12.6 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2497)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. A...

CVE-2022-2497

Removed by vendor...

CVE-2022-2497

GitLab CVE-2022-2497 affects GitLab CE/EE with multiple version ranges: 12.6–15.0.4, 15.1.x before 15.1.4, and 15.2.x before 15.2.1. The issue lets a malicious developer exfiltrate an integration’s access token by modifying an integration URL so authenticated requests hit an attacker-controlled s...