VULNERABILITY INTELLIGENCE
CVE-2022-0283
CVSS score4.7 MEDIUM
EPSS probability0.77%
CISA KEVNot currently listed
Published2022-03-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Description
An issue has been discovered affecting GitLab versions prior to 13.5. An open redirect vulnerability was fixed in GitLab integration with Jira that a could cause the web application to redirect the request to the attacker specified URL.
Weakness classification
- CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Primary references
- cve@gitlab.com — Vendor Advisory
- cve@gitlab.com — Broken Link, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory