Low severity2.6NVD Advisory· Published Jul 1, 2022· Updated Jun 17, 2026
CVE-2022-2281
CVE-2022-2281
Description
An information disclosure vulnerability in GitLab EE affecting all versions from 12.5 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows disclosure of release titles if group milestones are associated with any project releases.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*+ 3 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=12.5.0,<14.10.5
- cpe:2.3:a:gitlab:gitlab:15.1.0:*:*:*:enterprise:*:*:*
- (no CPE)range: from 12.5 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1
- (no CPE)range: >=12.5, <14.10.5
- Range: from 12.5 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2281.jsonnvdVendor Advisory
- hackerone.com/reports/1012659nvdPermissions RequiredThird Party Advisory
- gitlab.com/gitlab-org/gitlab/-/issues/271172nvdBroken Link
News mentions
0No linked articles in our index yet.