Unrated severityNVD Advisory· Published Jan 18, 2022· Updated Aug 2, 2024

CVE-2022-0172

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3. Under certain conditions it was possible to bypass the IP restriction for public projects through GraphQL allowing unauthorised users to read titles of issues, merge requests and milestones.

Affected products

GitLab Inc./CE/EEllm-fuzzy
Range: >=12.3
osv-coords
pkg:bitnami/gitlab
Range: >= 13.2.0, < 14.4.5
GitLab Inc./GitLabv5
Range: >=14.6, <14.6.2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0172.jsonmitrex_refsource_CONFIRM
gitlab.com/gitlab-org/gitlab/-/issues/348411mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000