VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Oct 17, 2022· Updated Jun 17, 2026

CVE-2022-3286

CVE-2022-3286

Description

Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows a group member to bypass IP restrictions when using a deploy token

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • GitLab Inc./GitLab2 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*+ 1 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=14.2,<15.2.5
    • (no CPE)range: >=14.2, <15.2.5
  • GitLab Inc./gitlab-org/gitlab-eellm-fuzzy
    Range: from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 14.2.0, < 15.2.5

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.