CVE-2022-3820 in GitLabИнформация

Сводка

по MITRE • 26.01.2023

An issue has been discovered in GitLab affecting all versions starting from 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. GitLab was not performing correct authentication with some Package Registries when IP address restrictions were configured, allowing an attacker already in possession of a valid Deploy Token to misuse it from any location.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Ответственный

GitLab Inc.

Резервировать

02.11.2022

Раскрытие

26.01.2023

Модерация

принято

Вход

VDB-219354

EPSS

0.00725

KEV

Нет

Деятельности

Очень низкий

Источники

Interested in the pricing of exploits?

See the underground prices here!