PT-2022-13665 · Gitlab · Gitlab Ce/Ee+1

Published 2022-04-04 · Updated 2024-03-06 · CVE-2022-1111

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 14.9 prior to 14.9.2 GitLab CE/EE versions 14.8 prior to 14.8.5 GitLab CE/EE versions 14.0 prior to 14.7.7

Description A business logic error in Project Import under certain conditions caused imported projects to show an incorrect user in the 'Access Granted' column in the project membership pages.

Recommendations For versions 14.9 prior to 14.9.2, update to version 14.9.2 or later. For versions 14.8 prior to 14.8.5, update to version 14.8.5 or later. For versions 14.0 prior to 14.7.7, update to version 14.7.7 or later.

Exploit

Fix

Related Identifiers

BIT-GITLAB-2022-1111

CVE-2022-1111

Affected Products

Gitlab

Gitlab Ce/Ee

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1111.json · Exploit
• https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1111.json · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1111 · Security Note
• https://ubuntu.com/security/CVE-2022-1111 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-1111 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-1111 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-1111 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-gitlab-2022-1111 · Vendor Advisory
• https://t.me/cibsecurity/40140 · Telegram Post
• https://gitlab.com/gitlab-org/gitlab/-/issues/345236 · Note