CVE-2022-4255: Medium severity gitlab vulnerability
Published Jan 27, 2023
·Updated
An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload.
Affected Software
6 affected components
GitLab GitLab>=13.7.0<15.4.6
GitLab GitLab>=13.7.0<15.4.6
GitLab GitLab>=15.5.0<15.5.5
GitLab GitLab>=15.5.0<15.5.5
GitLab GitLab=15.6.0
GitLab GitLab=15.6.0
Event History
Jan 27, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-4255?
CVE-2022-4255 has been classified as a medium severity vulnerability due to the potential exposure of user email addresses.
2
How do I fix CVE-2022-4255?
To fix CVE-2022-4255, upgrade GitLab to version 15.4.6, 15.5.5, or 15.6.1 or later.
3
What versions are affected by CVE-2022-4255?
CVE-2022-4255 affects all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1.
4
What kind of information is leaked in CVE-2022-4255?
CVE-2022-4255 exposes user email addresses through webhook payloads.
5
Is CVE-2022-4255 specific to any GitLab edition?
CVE-2022-4255 affects both the community and enterprise editions of GitLab.