medium4.3
CVE-2022-3381
An issue has been discovered in GitLab affecting all versions starting from 10.0 to 15.7.8, 15.8 prior to 15.8.4 and 15.9 prior to 15.9.2.
Impact
An issue has been discovered in GitLab affecting all versions starting from 10.0 to 15.7.8, 15.8 prior to 15.8.4 and 15.9 prior to 15.9.2. A crafted URL could be used to redirect users to arbitrary sites
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | from 10.0.0 before 15.7.8 from 15.8.0 before 15.8.4 from 15.9.0 before 15.9.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3381.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/376046
- https://hackerone.com/reports/1711497
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3381.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/376046
- https://hackerone.com/reports/1711497