5.3

CVE-2022-2539

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1, allowed a project member to filter issues by contact and organization.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gitlab ≫ GitLab SwEdition enterprise Version >= 14.6.0 < 15.0.5
Gitlab ≫ GitLab SwEdition enterprise Version >= 15.1.0 < 15.1.4
Gitlab ≫ GitLab Version 15.2 SwEdition enterprise
Gitlab ≫ GitLab SwEdition community Version >= 14.6.0 < 15.0.5
Gitlab ≫ GitLab SwEdition community Version >= 15.1.0 < 15.1.4
Gitlab ≫ GitLab Version 15.2 SwEdition community
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.71% 0.498
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cve@gitlab.com 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2539.json
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/364315
Vendor Advisory
Broken Link