Medium severity5.3NVD Advisory· Published Nov 9, 2022· Updated Jun 17, 2026
CVE-2022-3285
CVE-2022-3285
Description
Bypass of healthcheck endpoint allow list affecting all versions from 12.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an unauthorized attacker to prevent access to GitLab
Affected products
7cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 5 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=12.0.0,<15.2.5
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=12.0.0,<15.2.5
- cpe:2.3:a:gitlab:gitlab:15.4.0:*:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:15.4.0:*:*:*:enterprise:*:*:*
- (no CPE)range: <15.2.5, <15.3.4, <15.4.1
- (no CPE)range: >=12.0, <15.2.5
Patches
Vulnerability mechanics
References
2- gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3285.jsonnvdVendor Advisory
- gitlab.com/gitlab-org/security/omnibus-gitlab/-/issues/64nvdPermissions RequiredVendor Advisory
News mentions
0No linked articles in our index yet.