CVE-2022-3325

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-3325
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-3325.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-3325
Aliases
Downstream
Published
2022-10-17T00:00:00Z
Modified
2026-02-18T02:35:43.045972Z
Severity
  • 2.7 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
[none]
Details

Improper access control in the GitLab CE/EE API affecting all versions starting from 12.8 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. Allowed for editing the approval rules via the API by an unauthorised user.

Database specific 
{
    "cna_assigner": "GitLab",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3325.json"
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
abbda55531f0a9d630eee1dcf2305ca499c94116
Fixed
7b2ed8f038f6184c0485cdae8d97c9f579454ffc
Database specific 
{
    "versions": [
        {
            "introduced": "15.4"
        },
        {
            "fixed": "15.4.1"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
b189ba070558de141d90142340de25bd3edcbefc
Fixed
9c6bb746bd31413e3310bacd1ac5710d20aa32c0
Database specific 
{
    "versions": [
        {
            "introduced": "15.3"
        },
        {
            "fixed": "15.3.4"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
0bd32f788647bb832f3d9eb5746cbda5300e0fa2
Fixed
0b24f0547393a5606b1ec7e4e31cfeab4bce5cab
Database specific 
{
    "versions": [
        {
            "introduced": "12.8"
        },
        {
            "fixed": "15.2.5"
        }
    ]
}

Affected versions

v15.*
v15.3.0-ee
v15.3.1-ee
v15.3.2-ee
v15.3.3-ee
v15.4.0-ee

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-3325.json"