BIT-gitlab-2022-4143

vendorUSosv

view advisory published 2024-03-06Licence: per source

An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 before 15.10.1 that allows for crafted, unapproved MRs to be introduced and merged without authorization

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-4143US	medium5.3	0.76% (55th)	—	2023-06-28
An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 before 15.10.1 that allows for crafted, unap…

references

External citations — patches, advisories, analysis.

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4143.jsonADVISORY
https://gitlab.com/gitlab-org/gitlab/-/issues/383776EVIDENCE
https://hackerone.com/reports/1767639WEB
https://nvd.nist.gov/vuln/detail/CVE-2022-4143WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan