CVE-2022-3286
Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows a gro...
Original description
The description as published by the source.
Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows a group member to bypass IP restrictions when using a deploy token
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"14.2.0"},{"fixed":"15.2.5"},{"introduced":"15.3.0"},{"fixed":"15.3.4"},{"introduced":"15.4.0"},{"fixed":"15.4.1"}]}]
References
- advisory gitlab.com
- advisory gitlab.com
- web nvd.nist.gov