NetSight
medium4.3

CVE-2022-3330

It was possible for a guest user to read a todo targeting an inaccessible note in Gitlab CE/EE affecting all versions from 15.0 prior to 15.2.5, 15.3 prior to …

Impact

It was possible for a guest user to read a todo targeting an inaccessible note in Gitlab CE/EE affecting all versions from 15.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1.

Affected products

VendorProductAffected versions
GitlabGitlab
from 15.0.0 before 15.2.5
from 15.3 before 15.3.4
from 15.4 before 15.4.1

References