CVE-2022-3482

MEDIUM

GitLab 11.3-15.3.4, 15.4-15.4.3, 15.5-15.5.1 - Unauthenticated Release Name Exposure

Title source: llm
STIX 2.1

Description

An improper access control issue in GitLab CE/EE affecting all versions from 11.3 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allowed an unauthorized user to see release names even when releases we set to be restricted to project members only

References (3)

Core 3

Scores

CVSS v3 5.3
EPSS 0.0037
EPSS Percentile 59.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-862
Status published
Products (2)
gitlab/gitlab 15.6.0 (2 CPE variants)
gitlab/gitlab 11.3.0 - 15.4.6 (2 CPE variants)
Published Jan 26, 2023
Tracked Since Feb 18, 2026