Lucene search
Veracode Vulnerability DatabaseVERACODE:42495HistoryAug 06, 2023 - 11:13 p.m.
Improper Authorization
2023-08-0623:13:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
gitlab
authorization
variable access
vulnerability
attacker
public projects
private projects
0.002 Low
EPSS
Percentile
54.0%
gitlab is vulnerable to Improper Authorization. The vulnerabiltiy allows an attacker to extract the value of an unprotected variable they know the name of in public projects or private projects they’re a member of.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 | |
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 |
Related
cvelist
cvelist
CVE-2022-2229
2022-07-01 16:30:45
cve
cve
CVE-2022-2229
2022-07-01 17:15:00
osv
osv
BIT-gitlab-2022-2229
2024-03-06 11:15:31
CVE-2022-2229
2022-07-01 17:15:07
openvas
openvas
prion
prion
Authorization
2022-07-01 17:15:00
nessus
nessus
GitLab 13.7 < 14.10.5 / 15.0 < 15.0.4 / 15.1 < 15.1.1 (CVE-2022-2229)
2022-07-11 00:00:00
debiancve
debiancve
CVE-2022-2229
2022-07-01 17:15:00
ubuntucve
ubuntucve
CVE-2022-2229
2022-07-01 00:00:00
freebsd
freebsd
Gitlab -- multiple vulnerabilities
2022-06-30 00:00:00