vulnerability

Arch Linux: Incomplete Cleanup (CVE-2022-2307)

Try Surface Command
Back to search
Severity
4
CVSS
(AV:N/AC:M/Au:M/C:P/I:P/A:N)
Published
Aug 5, 2022
Added
Jul 11, 2025
Modified
Nov 27, 2025

Description

gitlab allows a malicious Group Owner to retain a usable Group Access Token even after the Group is deleted, though the APIs usable by that token are limited

Solution

arch-linux-upgrade-latest

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today