NetSight
IP …
medium5.3

CVE-2022-3286

Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows a group member…

Impact

Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows a group member to bypass IP restrictions when using a deploy token

Affected products

VendorProductAffected versions
GitlabGitlab
from 14.2 before 15.2.5
from 15.3 before 15.3.4
from 15.4 before 15.4.1

Weakness classification

CWE-284

References