CVE-2022-0373: Medium severity gitlab vulnerability
Published Apr 1, 2022
·Updated
Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4, and 12.6 to 14.7.1 allows project non-members to retrieve the service desk email address
Affected Software
2 affected components
GitLab GitLab>=12.4.0<14.7.1
GitLab GitLab>=12.4.0<14.7.1
Event History
Apr 1, 2022
CVE Published
via MITRE·10:17 PM
Data Sourced
via MITRE·10:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-0373?
CVE-2022-0373 has been rated as a medium severity vulnerability affecting GitLab.
2
How do I fix CVE-2022-0373?
To fix CVE-2022-0373, upgrade GitLab to version 14.7.2 or later.
3
Who is affected by CVE-2022-0373?
CVE-2022-0373 affects GitLab CE/EE versions from 12.4.0 to 14.7.1.
4
What does CVE-2022-0373 exploit?
CVE-2022-0373 exploits improper access control, allowing unauthorized users to access the service desk email address.
5
Is CVE-2022-0373 publicly disclosed?
Yes, CVE-2022-0373 has been publicly disclosed and acknowledged by GitLab.