p PatchFirst

CVE-2022-1111

CVE-2022-1111

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A business logic error in Project Import in GitLab CE/EE versions 14.9 prior to 14.9.2, 14.8 prior to 14.8.5, and 14.0 prior to 14.7.7 under certain conditions caused imported projects to show an incorrect user in the 'Access Granted' column in the project membership pages

CVSS 2.4 · Low · EPSS 0.6%

Published
Updated

Stack: system

Affected products and versions

  • gitlab

    Versions
    • >=14.9, <14.9.2: Affected
    • >=14.8.0, <14.8.5: Affected
    • >=14.0, <14.7.7: Affected

    No fix published

  • gitlab Ubuntu:16.04:LTS

    Versions
    • 8.4.3+dfsg-9
    • 8.4.3+dfsg-12
    • 8.5.8+dfsg-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →