CVE-2022-1983
Incorrect authorization in GitLab EE affecting all versions from 10.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allowed an att...
Original description
The description as published by the source.
Incorrect authorization in GitLab EE affecting all versions from 10.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allowed an attacker already in possession of a valid Deploy Key or a Deploy Token to misuse it from any location to access Container Registries even when IP address restrictions were configured.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"10.7.0"},{"fixed":"14.10.5"},{"introduced":"15.0.0"},{"fixed":"15.0.4"},{"introduced":"15.1.0"},{"fixed":"15.1.1"}]}]
References
- advisory gitlab.com
- web gitlab.com
- web nvd.nist.gov