CVE-2022-4255 - An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload

Back Back to CVE browser

MEDIUM

An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload

Published Jan 27, 2023

5.3

MEDIUM

CVSS 3.1

EPSS 0.49%

Description

An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload.

Affected products

Vendor GitLab Product GitLab Default
n/a
- Version
  >=13.7, <15.4.6
  Status
  affected
  Constraints
  -
- Version
  >=15.5, <15.5.5
  Status
  affected
  Constraints
  -
- Version
  >=15.6, <15.6.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

GitLab

n/a

Version	Status	Constraints
>=13.7, <15.4.6	affected	-
>=15.5, <15.5.5	affected	-
>=15.6, <15.6.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4255.json
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/373819
Issue TrackingVendor Advisory

Link	Providers	Tags
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4255.json		Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/373819		Issue TrackingVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner GitLab

Published Jan 27, 2023

Updated Mar 27, 2025

Reserved Dec 1, 2022

Link CVE-2022-4255

CISA Vulnrichment

Updated Mar 27, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-4255

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-4255