CVE-2022-3375
Assigner: GitLab
Published: 2023-04-05T00:00:00
State: PUBLISHED
descriptions: value: An issue has been discovered in GitLab affecting all versions starting from 11.10 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was possible to disclose the branch names when attacker has a fork of a project that was switched to private.
affected: vendor: GitLab
product: GitLab
versions: version: >=11.10, <15.8.5
status: affected
version: >=15.9, <15.9.4
status: affected
version: >=15.10, <15.10.1
status: affected
credits: value: Thanks [shells3c](https://hackerone.com/shells3c) for reporting this vulnerability through our HackerOne bug bounty program
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 3.1
baseSeverity: LOW
problemTypes: descriptions: type: text
description: Information exposure through an error message in GitLab