CVE-2022-0390: Medium severity gitlab vulnerability
Improper access control in Gitlab CE/EE versions 12.7 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1 allowed for project non-members to retrieve issue details when it was linked to an item from the vulnerability dashboard.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-0390?
CVE-2022-0390 is classified as a high-severity vulnerability due to improper access control allowing unauthorized access to issue details.
How do I fix CVE-2022-0390?
To fix CVE-2022-0390, update GitLab to version 14.5.5 or later, 14.6.5 or later, or 14.7.2 or later.
Which versions of GitLab are affected by CVE-2022-0390?
CVE-2022-0390 affects GitLab CE/EE versions from 12.7.0 to 14.5.4, 14.6.0 to 14.6.4, and 14.7.0 to 14.7.1.
What impact does CVE-2022-0390 have on GitLab users?
CVE-2022-0390 allows project non-members to retrieve sensitive issue details, potentially leading to data exposure.
Is there a workaround for CVE-2022-0390?
There is no official workaround for CVE-2022-0390; the recommended action is to update to a patched version of GitLab.