CoreCVE
Back

MEDIUM

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 15.3.5, all versions starting from 15.4 before 15.4.4, all versions starting from 15.5 before 15.5.2

Published Nov 9, 2022

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 15.3.5, all versions starting from 15.4 before 15.4.4, all versions starting from 15.5 before 15.5.2. A malicious maintainer could exfiltrate a Datadog integration's access token by modifying the integration URL such that authenticated requests are sent to an attacker controlled server.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner GitLab
Published Nov 9, 2022
Updated May 1, 2025
Reserved Oct 13, 2022
Link CVE-2022-3483
CISA Vulnrichment
Updated May 1, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-3483
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-3483