CVE-2022-1545
11.05.2022, 15:15
It was possible to disclose details of confidential notes created via the API in Gitlab CE/EE affecting all versions from 13.2 prior to 14.8.6, 14.9 prior to 14.9.4, and 14.10 prior to 14.10.1 if an unauthorised project member was tagged in the note.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 13.2.0 ≤ 𝑥 < 14.8.6 |
| gitlab | gitlab | 13.2.0 ≤ 𝑥 < 14.8.6 |
| gitlab | gitlab | 14.9.0 ≤ 𝑥 < 14.9.4 |
| gitlab | gitlab | 14.9.0 ≤ 𝑥 < 14.9.4 |
| gitlab | gitlab | 14.10.0 |
| gitlab | gitlab | 14.10.0 |
𝑥
= Vulnerable software versions
