NetSight
IP …
medium5.5

CVE-2022-2882

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versio…

Impact

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. A malicious maintainer could exfiltrate a GitHub integration's access token by modifying the integration URL such that authenticated requests are sent to an attacker controlled server.

Affected products

VendorProductAffected versions
GitlabGitlab
from 12.6.0 before 15.2.5
from 15.3 before 15.3.4
from 15.4 before 15.4.1

Weakness classification

CWE-668

References