GitLab Multiple Vulnerabilities
Release Date: 5 Jul 2022
RISK: Medium Risk
TYPE: Servers - Other Servers
Multiple vulnerabilities were identified in GitLab. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, sensitive information disclosure, cross-site scripting and security restriction bypass on the targeted system.
Impact
- Denial of Service
- Remote Code Execution
- Information Disclosure
- Cross-Site Scripting
- Security Restriction Bypass
System / Technologies affected
- GitLab Community Edition (CE) versions prior to 15.1.1, 15.0.4, and 14.10.5
- GitLab Enterprise Edition (EE) versions prior to 15.1.1, 15.0.4, and 14.10.5
Solutions
Before installation of the software, please visit the software vendor web-site for more details.
- The vendor has issued a fix
https://about.gitlab.com/releases/2022/06/30/critical-security-release-gitlab-15-1-1-released/
Vulnerability Identifier
- CVE-2022-1954
- CVE-2022-1963
- CVE-2022-1981
- CVE-2022-1983
- CVE-2022-1999
- CVE-2022-2185
- CVE-2022-2227
- CVE-2022-2228
- CVE-2022-2229
- CVE-2022-2230
- CVE-2022-2235
- CVE-2022-2243
- CVE-2022-2244
- CVE-2022-2250
- CVE-2022-2270
- CVE-2022-2281
沒有留言:
發佈留言