VULNERABILITY INTELLIGENCE
CVE-2022-3285
CVSS score5.3 MEDIUM
EPSS probability0.82%
CISA KEVNot currently listed
Published2022-11-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Description
Bypass of healthcheck endpoint allow list affecting all versions from 12.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an unauthorized attacker to prevent access to GitLab
Primary references
- cve@gitlab.com — Vendor Advisory
- cve@gitlab.com — Permissions Required, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Vendor Advisory