CVE-2022-0344: Medium severity gitlab vulnerability
An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting from 10.1 before 14.6.4, all versions starting from 10.2 before 14.7.1. Private project paths can be disclosed to unauthorized users via system notes when an Issue is closed via a Merge Request and later moved to a public project
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-0344?
CVE-2022-0344 is classified as a medium severity vulnerability.
How do I fix CVE-2022-0344?
To fix CVE-2022-0344, upgrade to GitLab version 14.5.4, 14.6.4, or 14.7.1 or later.
What are the potential impacts of CVE-2022-0344?
The potential impact of CVE-2022-0344 is the unauthorized disclosure of private project paths.
Who is affected by CVE-2022-0344?
CVE-2022-0344 affects all versions of GitLab starting from 10.0 before 14.5.4, 10.1 before 14.6.4, and 10.2 before 14.7.1.
How does the vulnerability CVE-2022-0344 occur?
CVE-2022-0344 occurs when an issue is closed via a merge request, allowing system notes to expose private project paths.