CVE-2022-2250
Assigner: GitLab
Published: 2022-07-01T15:03:14
State: PUBLISHED
affected: product: GitLab
vendor: GitLab
versions: status: affected
version: >=11.1, <14.10.5
status: affected
version: >=15.0, <15.0.4
status: affected
version: >=15.1, <15.1.1
credits: value: Thanks [stealthy](https://hackerone.com/stealthy) for reporting this vulnerability through our HackerOne bug bounty program
descriptions: value: An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows an attacker to redirect users to an arbitrary location if they trust the URL.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
version: 3.1
problemTypes: descriptions: description: Url redirection to untrusted site ('open redirect') in GitLab
type: text