VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 17, 2022· Updated May 13, 2025

CVE-2022-2527

CVE-2022-2527

Description

An issue in Incident Timelines has been discovered in GitLab CE/EE affecting all versions starting from 14.9 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2.which allowed an authenticated attacker to inject arbitrary content. A victim interacting with this content could lead to arbitrary requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • GitLab Inc./GitLabllm-fuzzy2 versions
    >=14.9, <15.1.6 || >=15.2, <15.2.4 || >=15.3, <15.3.2+ 1 more
    • (no CPE)range: >=14.9, <15.1.6 || >=15.2, <15.2.4 || >=15.3, <15.3.2
    • (no CPE)range: >=15.3, <15.3.2
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 14.9.0, < 15.1.6

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.