CVE-2022-2761: Medium severity gitlab vulnerability
Published Nov 9, 2022
·Updated
An information disclosure issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to use GitLab Flavored Markdown (GFM) references in a Jira issue to disclose the names of resources they don't have access to.
Affected Software
6 affected components
GitLab GitLab>=13.9.0<15.3.5
GitLab GitLab>=13.9.0<15.3.5
GitLab GitLab>=15.4.0<15.4.4
GitLab GitLab>=15.4.0<15.4.4
GitLab GitLab>=15.5.0<15.5.2
GitLab GitLab>=15.5.0<15.5.2
Event History
Nov 9, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-2761?
CVE-2022-2761 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2022-2761?
To fix CVE-2022-2761, upgrade GitLab to version 15.3.5 or later, 15.4.4 or later, or 15.5.2 or later.
3
Which versions are affected by CVE-2022-2761?
CVE-2022-2761 affects all GitLab CE/EE versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2.
4
What type of vulnerability is CVE-2022-2761?
CVE-2022-2761 is an information disclosure vulnerability.
5
Can CVE-2022-2761 be exploited remotely?
Yes, an attacker can exploit CVE-2022-2761 remotely using GitLab Flavored Markdown references in Jira issues.