vulnerability

Gitlab Gitlab: CVE-2022-2250: URL Redirection to Untrusted Site

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
2022-07-01
Added
2025-04-22
Modified
2025-05-05

Description

An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows an attacker to redirect users to an arbitrary location if they trust the URL.

Solution

gitlab-gitlab-cve-2022-2250-solution
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.