Low severity3.5NVD Advisory· Published Oct 17, 2022· Updated Jun 17, 2026
CVE-2022-3288
CVE-2022-3288
Description
A branch/tag name confusion in GitLab CE/EE affecting all versions prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an attacker to manipulate pages where the content of the default branch would be expected.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 3 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: <15.2.5
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: <15.2.5
- (no CPE)range: <15.2.5, 15.3 <15.3.4, 15.4 <15.4.1
- (no CPE)range: <15.2.5
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3288.jsonnvdVendor Advisory
- gitlab.com/gitlab-org/gitlab/-/issues/354948nvdBroken LinkVendor Advisory
- hackerone.com/reports/1498354nvdPermissions RequiredThird Party Advisory
News mentions
0No linked articles in our index yet.