CVE-2022-0344

Published March 28th, 2022

View on NVD ↗

CVSS v3

3.1

LOW

CVSS v2

4.3

MEDIUM

Affected

PROJECTS

Description

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting from 10.1 before 14.6.4, all versions starting from 10.2 before 14.7.1. Private project paths can be disclosed to unauthorized users via system notes when an Issue is closed via a Merge Request and later moved to a public project

gitlab-org/cves

This project hosts the CVEs that have been assigned by GitLab in its role as a CNA. See https://about.gitlab.com/security/cve/ for more information

GitLab

gitlab-org/gitlab

GitLab is the open-source DevSecOps platform that provides a complete software development lifecycle toolchain including source control, CI/CD, security scanning, and project management in a single application.

GitLab

6.06K