CVE-2022-3330 in Community Edition

Résumé

par MITRE • 17/10/2022

It was possible for a guest user to read a todo targeting an inaccessible note in Gitlab CE/EE affecting all versions from 15.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: GitLab Inc.
• Réserver: 27/09/2022
• Divulgation: 17/10/2022
• Modérer: accepté
• Entrée: VDB-211181
• CPE: prêt
• CWE: CWE-200 (confirmé)
• CVSS: 4.3 (CNA)
• EPSS: 0.00536
• KEV: non
• Activités: très faible
• Secteur: Hostingprovider, Pharma, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-3330
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-3330
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-3330/