Ubuntu.comUB:CVE-2022-4143CVE-2022-4143
6.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
0.001 Low
EPSS
Percentile
27.0%
An issue has been discovered in GitLab affecting all versions starting from
15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 before 15.10.1
that allows for crafted, unapproved MRs to be introduced and merged without
authorization
References
Related
6.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
0.001 Low
EPSS
Percentile
27.0%