VYPR
← All advisories
Low severity2.7NVD Advisory· Published Oct 17, 2022· Updated Jun 17, 2026

CVE-2022-3325

CVE-2022-3325

Description

Improper access control in the GitLab CE/EE API affecting all versions starting from 12.8 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. Allowed for editing the approval rules via the API by an unauthorised user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • GitLab Inc./GitLab3 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 2 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=12.8.0,<15.2.5
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=12.8.0,<15.2.5
    • (no CPE)range: >=15.4, <15.4.1
  • GitLab Inc./GitLab EE and CEllm-fuzzy
    Range: starting from 12.8 before 15.2.5, starting from 15.3 before 15.3.4, starting from 15.4 before 15.4.1
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 12.8.0, < 15.2.5

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.