CVE-2022-1460: Medium severity gitlab vulnerability
An issue has been discovered in GitLab affecting all versions starting from 9.2 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not performing correct authorizations on scheduled pipelines allowing a malicious user to run a pipeline in the context of another user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1460?
CVE-2022-1460 is classified as a high severity vulnerability due to its potential to allow unauthorized execution of scheduled pipelines.
How do I fix CVE-2022-1460?
To fix CVE-2022-1460, upgrade your GitLab instance to version 14.8.6, 14.9.4, or 14.10.1 or later.
Which versions of GitLab are affected by CVE-2022-1460?
CVE-2022-1460 affects GitLab versions from 9.2 to 14.8.6, 14.9 from 14.9.0 to 14.9.4, and 14.10.0.
What can a malicious user do due to CVE-2022-1460?
A malicious user can exploit CVE-2022-1460 to run scheduled pipelines without proper authorization.
Is there a workaround for CVE-2022-1460?
There is no official workaround for CVE-2022-1460; the recommended action is to apply the available updates.