CVE-2022-1983
CVE-2022-1983
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Incorrect authorization in GitLab EE affecting all versions from 10.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allowed an attacker already in possession of a valid Deploy Key or a Deploy Token to misuse it from any location to access Container Registries even when IP address restrictions were configured.
CVSS 6.5 · Moyenne · EPSS 0,7%
- Publication
- Mise à jour
Pile logicielle: system