CVE-2022-4255

MEDIUM

GitLab EE <15.4.6, <15.5.5, <15.6.1 - Info Disclosure

Title source: llm
STIX 2.1

Description

An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload.

References (2)

Core 2

Scores

CVSS v3 4.3
EPSS 0.0014
EPSS Percentile 33.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (2)
gitlab/gitlab 15.6.0 (2 CPE variants)
gitlab/gitlab 13.7.0 - 15.4.6 (2 CPE variants)
Published Jan 27, 2023
Tracked Since Feb 18, 2026