VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 5, 2022· Updated Aug 3, 2024

CVE-2022-2512

CVE-2022-2512

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. Membership changes are not reflected in TODO for confidential notes, allowing a former project members to read updates via TODOs.

Affected products

4
  • GitLab Inc./GitLabllm-fuzzy2 versions
    >=15.0, <15.0.5 || >=15.1, <15.1.4 || >=15.2, <15.2.1+ 1 more
    • (no CPE)range: >=15.0, <15.0.5 || >=15.1, <15.1.4 || >=15.2, <15.2.1
    • (no CPE)range: >=15.2, <15.2.1
  • GitLab Inc./CE/EEllm-fuzzy
    Range: >=15.0, <15.0.5 || >=15.1, <15.1.4 || >=15.2, <15.2.1
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 15.0.0, < 15.0.5

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.