CVE-2022-4255
Assigner: GitLab
Published: 2023-01-27T00:00:00
State: PUBLISHED
descriptions: value: An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload.
affected: vendor: GitLab
product: GitLab
versions: version: >=13.7, <15.4.6
status: affected
version: >=15.5, <15.5.5
status: affected
version: >=15.6, <15.6.1
status: affected
credits: value: This vulnerability has been discovered internally by the GitLab team
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
problemTypes: descriptions: type: text
description: Information exposure in GitLab