Unrated severityNVD Advisory· Published Apr 4, 2022· Updated Aug 2, 2024
CVE-2022-1105
CVE-2022-1105
Description
An improper access control vulnerability in GitLab CE/EE affecting all versions from 13.11 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an unauthorized user to access pipeline analytics even when public pipelines are disabled
Affected products
3- Range: >=13.11 <14.7.7, >=14.8 <14.8.5, >=14.9 <14.9.2
- Range: >=13.11, <14.7.7
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1105.jsonmitrex_refsource_CONFIRM
- gitlab.com/gitlab-org/gitlab/-/issues/335933mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.