VDB
CVE-2022-3285
CVE-2022-3285
PUBLISHED
CVSS 7.5 HIGH
Bypass of healthcheck endpoint allow list affecting all versions from 12.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an unauthorized attacker to prevent access to GitLab
EPSS 0.82% · 55.6th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.82%
55.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 12.0.0, 15.3.0, 15.4.0 |
| Bitnami | gitlab | 12.0.0, 15.3.0, 15.4.0 |
Timeline
- Jul 1, 2022 CVE Published
- Nov 10, 2022 EPSS Score
- Dec 24, 2022 EPSS Score
- Feb 5, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 21, 2023 EPSS Score
- May 3, 2023 EPSS Score
- Jun 16, 2023 EPSS Score
- Jul 30, 2023 EPSS Score
- Oct 25, 2023 EPSS Score
- Dec 7, 2023 EPSS Score
- Jan 20, 2024 EPSS Score