VDB

CVE-2022-3375

CVE-2022-3375 PUBLISHED CVSS 3.700000047683716 LOW

An issue has been discovered in GitLab affecting all versions starting from 11.10 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was possible to disclose the branch names when attacker has a fork of a project that was switched to private.

EPSS 0.80% · 54.8th percentile

Risk Scores

CVSS 3.1
3.700000047683716
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.80%
54.8th percentile

Affected Products

VendorProductVersions
Bitnamigitlab11.10.0, 15.9.0, 15.10.0
Bitnamigitlab11.10.0, 15.9.0, 15.10.0

Timeline

  • Jul 1, 2022 CVE Published
  • Apr 6, 2023 EPSS Score
  • May 15, 2023 EPSS Score
  • Jun 22, 2023 EPSS Score
  • Jun 28, 2023 CVE Updated
  • Jul 31, 2023 EPSS Score
  • Sep 7, 2023 EPSS Score
  • Oct 16, 2023 EPSS Score
  • Nov 23, 2023 EPSS Score
  • Jan 1, 2024 EPSS Score
  • Feb 8, 2024 EPSS Score
  • Mar 18, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›