CVE-2022-2243: Medium severity gitlab vulnerability
Published Jul 1, 2022
·Updated
An access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows authenticated users to enumerate issues in non-linked sentry projects.
Affected Software
6 affected components
GitLab GitLab>=14.8.0<14.10.5
GitLab GitLab>=14.8.0<14.10.5
GitLab GitLab>=15.0.0<15.0.4
GitLab GitLab>=15.0.0<15.0.4
GitLab GitLab=15.1.0
GitLab GitLab=15.1.0
Event History
Jul 1, 2022
CVE Published
via MITRE·03:52 PM
Data Sourced
via MITRE·03:52 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-2243?
CVE-2022-2243 is considered a moderate severity vulnerability as it allows authenticated users to enumerate issues in non-linked sentry projects.
2
How do I fix CVE-2022-2243?
To fix CVE-2022-2243, update your GitLab instance to version 14.10.5 or later, 15.0.4 or later, or 15.1.1 or later.
3
What versions are affected by CVE-2022-2243?
CVE-2022-2243 affects GitLab versions 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1.
4
Who can exploit CVE-2022-2243?
CVE-2022-2243 can be exploited by any authenticated user within GitLab.
5
What type of vulnerability is CVE-2022-2243?
CVE-2022-2243 is classified as an access control vulnerability.