CVE-2022-3740 Affecting gitlab package, versions <15.10.8+ds1-2
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-DEBIANUNSTABLE-GITLAB-3151774
- published 1 Dec 2022
- disclosed 26 Jan 2023
Introduced: 1 Dec 2022
CVE-2022-3740 Open this link in a new tabHow to fix?
Upgrade Debian:unstable gitlab to version 15.10.8+ds1-2 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream gitlab package and not the gitlab package as distributed by Debian.
See How to fix? for Debian:unstable relevant fixed versions and status.
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. A group owner may be able to bypass External Authorization check, if it is enabled, to access git repositories and package registries by using Deploy tokens or Deploy keys .