CVE-2022-3330 in Community Edition

Resumen

por MITRE • 2022-10-17

It was possible for a guest user to read a todo targeting an inaccessible note in Gitlab CE/EE affecting all versions from 15.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: GitLab Inc.
• Reservar: 2022-09-27
• Divulgación: 2022-10-17
• Moderación: aceptado
• Artículo: VDB-211181
• CPE: listo
• CWE: CWE-200 (confirmado)
• CVSS: 4.3 (CNA)
• EPSS: 0.00551
• KEV: no
• Actividades: muy bajo
• Sector: Insurance, Telecommunication, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-3330
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-3330
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-3330/