CVE-2022-2499

Publication date

2022-08-05 15:09:33

Family

GitLab

State

PUBLISHED

Description

An issue has been discovered in GitLab EE affecting all versions starting from 13.10 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. GitLabs Jira integration has an insecure direct object reference vulnerability that may be exploited by an attacker to leak Jira issues.