VULNERABILITY INTELLIGENCE

CVE-2022-4143

CVSS score6.4 MEDIUM

EPSS probability0.76%

CISA KEVNot currently listed

Published2023-06-28

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N

Description

An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 before 15.10.1 that allows for crafted, unapproved MRs to be introduced and merged without authorization

Weakness classification

nvd@nist.gov: CWE-367

Primary references

cve@gitlab.com — Vendor Advisory
cve@gitlab.com — Exploit, Issue Tracking
cve@gitlab.com — Permissions Required
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required