Low severity3.5NVD Advisory· Published Oct 17, 2022· Updated Jun 17, 2026
CVE-2022-3331
CVE-2022-3331
Description
An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. GitLab's Zentao integration has an insecure direct object reference vulnerability that may be exploited by an attacker to leak Zentao project issues.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*+ 1 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=14.5,<15.1.6
- (no CPE)range: >=14.5, <15.1.6
- Range: starting from 14.5 before 15.1.6, starting from 15.2 before 15.2.4, starting from 15.3 before 15.3.2
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/gitlab/-/issues/360372nvdExploitIssue TrackingVendor Advisory
- gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3331.jsonnvdVendor Advisory
- hackerone.com/reports/1542834nvdPermissions RequiredThird Party Advisory
News mentions
0No linked articles in our index yet.