CVE-2022-3820 in GitLabthông tin

Tóm tắt

Bởi MITRE • 26/01/2023

An issue has been discovered in GitLab affecting all versions starting from 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. GitLab was not performing correct authentication with some Package Registries when IP address restrictions were configured, allowing an attacker already in possession of a valid Deploy Token to misuse it from any location.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

chịu trách nhiệm

GitLab Inc.

Đặt trước

02/11/2022

Tiết lộ

26/01/2023

Kiểm duyệt

được chấp nhận

EPSS

0.00725

KEV

không

Các hoạt động

rất thấp

Nguồn

Might our Artificial Intelligence support you?

Check our Alexa App!