Unrated severityNVD Advisory· Published Jan 12, 2023· Updated Apr 8, 2025
CVE-2022-4037
CVE-2022-4037
Description
An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. A race condition can lead to verified email forgery and takeover of third-party accounts when using GitLab as an OAuth provider.
Affected products
3- Range: <15.5.7, >=15.6 <15.6.4, >=15.7 <15.7.2
- Range: >=0.0, <15.5.7
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
1- Smashing the state machine: the true potential of web race conditionsPortSwigger Research · Aug 9, 2023