Beveiligingsadvies

CVE-2022-3483

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-11-09 00:00:00

Laatst bijgewerkt 2025-05-01 19:28:48

Toegewezen door GitLab

CVSS-score 5.5

Status PUBLISHED

Beschrijving

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 15.3.5, all versions starting from 15.4 before 15.4.4, all versions starting from 15.5 before 15.5.2. A malicious maintainer could exfiltrate a Datadog integration's access token by modifying the integration URL such that authenticated requests are sent to an attacker controlled server.

← Alle CVE's bekijken Bekijk op cve.org ↗