CVE-2022-4335: SSRF
Published Jan 27, 2023
·Updated
A blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which allows an attacker to connect to a local host.
Affected Software
3 affected components
GitLab GitLab<15.4.6
GitLab GitLab>=15.5.0<15.5.5
GitLab GitLab>=15.6<15.6.1
Event History
Jan 27, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-4335?
CVE-2022-4335 is classified as a moderate severity vulnerability that could lead to unauthorized access.
2
How do I fix CVE-2022-4335?
To mitigate CVE-2022-4335, you should upgrade GitLab to version 15.4.6, 15.5.5, or 15.6.1 and later.
3
Which versions of GitLab are affected by CVE-2022-4335?
CVE-2022-4335 affects all versions of GitLab EE before 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1.
4
What type of vulnerability is CVE-2022-4335?
CVE-2022-4335 is a blind Server-Side Request Forgery (SSRF) vulnerability.
5
Can CVE-2022-4335 allow an attacker access to internal services?
Yes, CVE-2022-4335 allows an attacker to connect to a local host, potentially accessing internal services.