CVE-2022-3291

MEDIUM

GitLab EE <15.2.5-15.4.1 - Info Disclosure

Title source: llm
STIX 2.1

Description

Serialization of sensitive data in GitLab EE affecting all versions from 14.9 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 can leak sensitive information via cache

References (2)

Core 2

Scores

CVSS v3 6.5
EPSS 0.0033
EPSS Percentile 56.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-502
Status published
Products (1)
gitlab/gitlab 14.9 - 15.2.5
Published Oct 17, 2022
Tracked Since Feb 18, 2026