vulnerability

FreeBSD: VID-04422df1-40d8-11ed-9be7-454b1dd82c64 (CVE-2022-3325): Gitlab -- Multiple vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:M/C:N/I:P/A:N)

Published

Sep 30, 2022

Added

Nov 4, 2022

Modified

Jun 15, 2026

Description

Improper access control in the GitLab CE/EE API affecting all versions starting from 12.8 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. Allowed for editing the approval rules via the API by an unauthorised user.

Solution

freebsd-upgrade-package-gitlab-ce

References

CVE-2022-3325
https://attackerkb.com/topics/CVE-2022-3325
CWE-284
EUVD-EUVD-2022-42715
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42715

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report