An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. GitLab was returning contributor emails due to improper data handling in the Datadog integration.
References
| Link | Resource |
|---|---|
| https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2534.json | Vendor Advisory |
| https://gitlab.com/gitlab-org/gitlab/-/issues/361654 | Broken Link Vendor Advisory |
| https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2534.json | Vendor Advisory |
| https://gitlab.com/gitlab-org/gitlab/-/issues/361654 | Broken Link Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 07:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2534.json - Vendor Advisory | |
| References | () https://gitlab.com/gitlab-org/gitlab/-/issues/361654 - Broken Link, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 2.2 |
11 Aug 2022, 15:27
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| CPE | cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* cpe:2.3:a:gitlab:gitlab:15.2:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:15.2:*:*:*:enterprise:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* |
|
| References | (CONFIRM) https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2534.json - Vendor Advisory | |
| References | (MISC) https://gitlab.com/gitlab-org/gitlab/-/issues/361654 - Broken Link, Vendor Advisory |
05 Aug 2022, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-08-05 16:15
Updated : 2024-11-21 07:01
NVD link : CVE-2022-2534
Mitre link : CVE-2022-2534
CVE.ORG link : CVE-2022-2534
JSON object : View
Products Affected
gitlab
- gitlab
CWE