CVE-2022-0093
published 2022-01-18CVE-2022-0093: An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an…
PriorityP421medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
0.91%
55.6th percentile
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive information through RSS feeds.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gitlab | < gitlab 15.10.8+ds1-2 (sid) | gitlab 15.10.8+ds1-2 (sid) |
| gitlab | gitlab | < 14.4.5 | 14.4.5 |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | >= 14.5.0 < 14.5.3 | 14.5.3 |
| gitlab | gitlab | >= 14.6.0 < 14.6.1 | 14.6.1 |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
osv4.3MEDIUM
vendor_debian3.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GitLab
CVE-2022-0093: An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user
vendor_gitlab·2022-01-18·CVSS 3.5
CVE-2022-0093 [LOW] CVE-2022-0093: An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user
CVE-2022-0093: An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive information through RSS feeds.
Debian
CVE-2022-0093: gitlab - An issue has been discovered affecting GitLab versions prior to 14.4.5, between ...
vendor_debian·2022·CVSS 3.5
CVE-2022-0093 [LOW] CVE-2022-0093: gitlab - An issue has been discovered affecting GitLab versions prior to 14.4.5, between ...
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive information through RSS feeds.
Scope: local
sid: resolved (fixed in 15.10.8+ds1-2)
GHSA
GHSA-5qxw-jpqh-h83p: An issue has been discovered affecting GitLab versions prior to 14
ghsa_unreviewed·2022-01-19
CVE-2022-0093 [MEDIUM] CWE-200 GHSA-5qxw-jpqh-h83p: An issue has been discovered affecting GitLab versions prior to 14
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive information through RSS feeds.
OSV
CVE-2022-0093: An issue has been discovered affecting GitLab versions prior to 14
osv·2022-01-18·CVSS 4.3
CVE-2022-0093 [MEDIUM] CVE-2022-0093: An issue has been discovered affecting GitLab versions prior to 14
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive information through RSS feeds.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0093.jsonhttps://gitlab.com/gitlab-org/gitlab/-/issues/343247https://hackerone.com/reports/1348738https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0093.jsonhttps://gitlab.com/gitlab-org/gitlab/-/issues/343247https://hackerone.com/reports/1348738
2022-01-18
Published