CVE-2022-4255 in Enterprise Edition

सारांश

द्वारा MITRE • 28/01/2023

An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• जिम्मेदार: GitLab Inc.
• आरक्षित करना: 01/12/2022
• प्रकटीकरण: 28/01/2023
• संयम: स्वीकृत
• प्रविष्टि: VDB-219692
• CPE: तैयार
• CWE: CWE-200 (पुष्टि की गई)
• CVSS: 5.3 (NVD)
• EPSS: 0.00491
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Pharma, Finance, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-4255
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-4255
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-4255/