Vulnetix
Try Vulnetix Request Demo
CVE-2022-4167 PUBLISHED

Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2 allows group access tokens to continue working even after the group owner loses the ability to revoke them.

EPSS 0.20% · 41.5th percentile

Risk Scores

EPSS Score
0.20%
41.5th percentile

Affected Products

VendorProductVersions
Bitnamigitlab13.11.0, 15.6.0, 15.7.0
Bitnamigitlab13.11.0, 15.6.0, 15.7.0

Timeline

References

Open in Interactive Console →