CVE-2022-3330
It was possible for a guest user to read a todo targeting an inaccessible note in Gitlab CE/EE affecting all versions from 15.0 prior to 15.2.5, 15.3...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
It was possible for a guest user to read a todo targeting an inaccessible note in Gitlab CE/EE affecting all versions from 15.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"15.0.0"},{"fixed":"15.2.5"},{"introduced":"15.3.0"},{"fixed":"15.3.4"},{"introduced":"15.4.0"},{"fixed":"15.4.1"}]}]
Références
- advisory gitlab.com
- advisory gitlab.com
- web nvd.nist.gov