NA

CVE-2022-2326

Published: 05/08/2022 Updated: 11/08/2022
CVSS v3 Base Score: 8.1 | Impact Score: 5.2 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

An issue has been discovered in GitLab CE/EE affecting all versions prior to 15.0.5, all versions starting from 15.1 prior to 15.1.4, all versions starting from 15.2 prior to 15.2.1. It may be possible to gain access to a private project through an email invite by using other user's email address as an unverified secondary email.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gitlab gitlab

gitlab gitlab 15.2

Vendor Advisories

It may be possible to gain access to a private project through an email invite by using other user's email address as an unverified secondary email ...