Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-4167: 2022/CVE-2022-4167.json · master · GitLab.org / cves · GitLab

Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2 allows group access tokens to continue working even after the group owner loses the ability to revoke them.

CVE
#js#git#auth

Skip to content

GitLab

Next

    • GitLab: the DevOps platform
    • Explore GitLab
    • Install GitLab
    • How GitLab compares
    • Get started
    • GitLab docs
    • GitLab Learn
  • Pricing

  • Talk to an expert

  • /

  • Help

    • Help

    • Support

    • Community forum

    • Submit feedback

    • Contribute to GitLab

    Projects Groups Snippets

  • Sign up now

  • Login

  • Sign in / Register

  • GitLab.org
  • cves
  • Repository

Switch branch/tag

  • cves
  • 2022
  • CVE-2022-4167.json

Find file BlameHistoryPermalink

  • Publishing 0 updated advisories and 1 new advisories · 7065d13e

    🤖 GitLab Bot 🤖 authored Jan 10, 2023

    7065d13e

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907