CVE-2022-3286

Publication date

2022-10-17 00:00:00

Family

GitLab

State

PUBLISHED

Description

Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows a group member to bypass IP restrictions when using a deploy token