CVE-2022-4343

CVE-2022-4343 affects GitLab EE: a project member can leak credentials stored in site profile across versions 13.12–16.1.5, 16.2–16.2.4, and 16.3–16.3.0. The issue is reported as an information disclosure vulnerability. Publicly available details from NVD/OSV/NCSC confirm remediation: update to G...

GitLab 13.12 < 16.1.5 / 16.2 < 16.2.5 / 16.3 < 16.3.1 (CVE-2022-4343)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 in whic...