Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2022-0373

Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4, and 12.6 to 14.7.1 allows project non-members to retrieve the service desk email address

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitLab

Description

Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4, and 12.6 to 14.7.1 allows project non-members to retrieve the service desk email address

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GitLab GitLab

  • >=12.4, <14.5.4affected
  • >=14.6, <14.6.4affected
  • >=14.7, <14.7.1affected

References