CVE-2022-3325 — Vulnetix

Try Vulnetix Request Demo

CVE-2022-3325 PUBLISHED

Improper access control in the GitLab CE/EE API affecting all versions starting from 12.8 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. Allowed for editing the approval rules via the API by an unauthorised user.

EPSS 0.12% · 31.2th percentile

Risk Scores

EPSS Score

0.12%

31.2th percentile

Affected Products

Vendor	Product	Versions
Bitnami	gitlab	12.8.0, 15.3.0, 15.4.0
Bitnami	gitlab	12.8.0, 15.3.0, 15.4.0

Timeline

Jul 1, 2022 CVE Published
Oct 18, 2022 EPSS Score
Nov 30, 2022 EPSS Score
Jan 12, 2023 EPSS Score
Feb 25, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 9, 2023 EPSS Score
May 22, 2023 EPSS Score
Jul 4, 2023 EPSS Score
Aug 16, 2023 EPSS Score
Sep 29, 2023 EPSS Score
Nov 11, 2023 EPSS Score

References

Open in Interactive Console →