CVE-2022-3381 MEDIUM

CVE-2022-3381

Vendor Gitlab
Product GitLab
Published March 9, 2023
Last update February 28, 2025
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

An issue has been discovered in GitLab affecting all versions starting from 10.0 to 15.7.8, 15.8 prior to 15.8.4 and 15.9 prior to 15.9.2. A crafted URL could be used to redirect users to arbitrary sites

Key dates

02Disclosure timeline

March 9, 2023 CVE published
February 28, 2025 Record updated