Medium severity6.4NVD Advisory· Published Jun 28, 2023· Updated Jun 17, 2026
CVE-2022-4143
CVE-2022-4143
Description
An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 before 15.10.1 that allows for crafted, unapproved MRs to be introduced and merged without authorization
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 5 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=15.7.0,<15.8.5
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=15.7.0,<15.8.5
- cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:15.10.0:*:*:*:enterprise:*:*:*
- (no CPE)range: 15.7 <= versions < 15.8.5, 15.9 <= versions < 15.9.4, 15.10 <= versions < 15.10.1
- (no CPE)range: >=15.7, <15.8.5
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/gitlab/-/issues/383776nvdExploitIssue Tracking
- gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4143.jsonnvdVendor Advisory
- hackerone.com/reports/1767639nvdPermissions Required
News mentions
0No linked articles in our index yet.