CVE-2022-3280
An open redirect in GitLab CE/EE affecting all versions from 10.1 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker t...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An open redirect in GitLab CE/EE affecting all versions from 10.1 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to trick users into visiting a trustworthy URL and being redirected to arbitrary content.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"10.1.0"},{"fixed":"15.3.5"},{"introduced":"15.4.0"},{"fixed":"15.4.4"},{"introduced":"15.5.0"},{"fixed":"15.5.2"}]}]
Références
- advisory gitlab.com
- advisory hackerone.com
- web gitlab.com
- web nvd.nist.gov