Medium severity5.3NVD Advisory· Published Aug 5, 2022· Updated Jun 17, 2026
CVE-2022-2531
CVE-2022-2531
Description
An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. GitLab was not performing correct authentication on Grafana API under specific conditions allowing unauthenticated users to perform queries through a path traversal vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*+ 2 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=12.5.0,<15.0.5
- cpe:2.3:a:gitlab:gitlab:15.2:*:*:*:enterprise:*:*:*
- (no CPE)range: >=12.5, <15.0.5
- Range: 12.5 <= v < 15.0.5, 15.1 <= v < 15.1.4, 15.2 <= v < 15.2.1
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2531.jsonnvdVendor Advisory
- gitlab.com/gitlab-org/gitlab/-/issues/364252nvdBroken LinkVendor Advisory
- hackerone.com/reports/1566306nvdPermissions RequiredThird Party Advisory
News mentions
0No linked articles in our index yet.