CVE-2022-4462: Medium severity gitlab vulnerability
An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. This vulnerability could allow a user to unmask the Discord Webhook URL through viewing the raw API response.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-4462?
CVE-2022-4462 is classified as a medium severity vulnerability.
How do I fix CVE-2022-4462?
To fix CVE-2022-4462, you should upgrade GitLab to version 15.7.8 or later, or upgrade to version 15.8.4 or later, or 15.9.2 or later.
Who is affected by CVE-2022-4462?
CVE-2022-4462 affects all GitLab versions starting from 12.8 before 15.7.8, 15.8 before 15.8.4, and 15.9 before 15.9.2.
What can attackers do with CVE-2022-4462?
Attackers can exploit CVE-2022-4462 to unmask the Discord Webhook URL by viewing the raw API response.
Is CVE-2022-4462 limited to a specific edition of GitLab?
No, CVE-2022-4462 affects both the Community and Enterprise editions of GitLab.