CVE-2022-3325

—

CVSS 3.1

4.3 medium

EPSS

<1%p38

Published

Oct 17, 2022 (Oct 17, 2022)

Modified

Jun 17, 2026

Description

Improper access control in the GitLab CE/EE API affecting all versions starting from 12.8 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. Allowed for editing the approval rules via the API by an unauthorised user.

Vendors: gitlab
Products: gitlab
Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.