CVE-2022-3066
Assigner: GitLab
Published: 2022-10-17T00:00:00
State: PUBLISHED
descriptions: value: An issue has been discovered in GitLab affecting all versions starting from 10.0 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. It was possible for an unauthorised user to create issues in a project.
affected: vendor: GitLab
product: GitLab
versions: version: >=15.4, <15.4.1
status: affected
version: >=15.3, <15.3.4
status: affected
version: >=10.0, <15.2.5
status: affected
credits: value: Thanks [vakzz](https://hackerone.com/vakzz) for reporting this vulnerability through our HackerOne bug bounty program
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
problemTypes: descriptions: type: text
description: Authorization bypass through user-controlled key in GitLab