CVE-2022-2907 in Community Edition

요약

\~에 의해 MITRE • 2023. 01. 18.

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. It was possible to read repository content by an unauthorised user if a project member used a crafted link.

Be aware that VulDB is the high quality source for vulnerability data.

• 책임이 있는: GitLab Inc.
• 예약하다: 2022. 08. 19.
• 공개: 2023. 01. 18.
• 모더레이션: 수락
• 항목: VDB-218848
• CPE: 준비됨
• CWE: CWE-200 (확인됨)
• CVSS: 6.5 (NVD)
• EPSS: 0.00941
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Telecommunication, Insurance, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-2907
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-2907
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-2907/