vulnerability

FreeBSD: VID-4c26f668-0fd2-11ed-a83d-001b217b3468 (CVE-2022-2531): Gitlab -- multiple vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:N/A:N)

Published

Jul 30, 2022

Added

Nov 4, 2022

Modified

Jun 15, 2026

Description

An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. GitLab was not performing correct authentication on Grafana API under specific conditions allowing unauthenticated users to perform queries through a path traversal vulnerability.

Solution

freebsd-upgrade-package-gitlab-ce

References

CVE-2022-2531
https://attackerkb.com/topics/CVE-2022-2531
CWE-22
EUVD-EUVD-2022-34785
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-34785

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report