CVE-2022-4205
MEDIUMGitLab < 15.6.1, 15.5.5, 15.4.6 - Type Confusion via Hexadecimal Branch Name
Title source: llmDescription
In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash.
References (2)
Core 2
Core References
Exploit, Issue Tracking, Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/374082
Scores
CVSS v3
6.3
EPSS
0.0060
EPSS Percentile
44.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-843
Status
published
Products (2)
gitlab/gitlab
15.6.0 (2 CPE variants)
gitlab/gitlab
1.0.0 - 12.9.8 (2 CPE variants)
Published
Jan 27, 2023
Tracked Since
Feb 18, 2026