CoreCVE
Back

MEDIUM

An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1

Published Jul 1, 2022

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1. Under certain conditions, using the REST API an unprivileged user was able to change labels description.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner GitLab
Published Jul 1, 2022
Updated Aug 3, 2024
Reserved Jun 6, 2022
Link CVE-2022-1999

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2022-1999

Red Hat

No data

ENISA EUVD

Assigner GitLab
Published Jul 1, 2022
Updated Aug 3, 2024
Link EUVD-2022-25260

GitHub

No data