CVE-2022-3286 — Vulnetix

Try Vulnetix Request Demo

CVE-2022-3286 PUBLISHED

Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows a group member to bypass IP restrictions when using a deploy token

EPSS 0.12% · 31.4th percentile

Risk Scores

EPSS Score

0.12%

31.4th percentile

Affected Products

Vendor	Product	Versions
Bitnami	gitlab	14.2.0, 15.3.0, 15.4.0
Bitnami	gitlab	14.2.0, 15.3.0, 15.4.0

Timeline

Sep 29, 2022 CVE Published
Oct 18, 2022 EPSS Score
Nov 30, 2022 EPSS Score
Dec 12, 2022 CVE Updated
Jan 12, 2023 EPSS Score
Feb 25, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 9, 2023 EPSS Score
May 22, 2023 EPSS Score
Jul 4, 2023 EPSS Score
Aug 16, 2023 EPSS Score
Sep 29, 2023 EPSS Score

References

Open in Interactive Console →