Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-3819
HistoryNov 10, 2022 - 12:00 a.m.

CVE-2022-3819

2022-11-1000:00:00
ubuntu.com
ubuntu.com
19
gitlab
improper authorization
emojis
internal notes
unix

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

33.5%

An improper authorization issue in GitLab CE/EE affecting all versions from
15.0 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows
a malicious users to set emojis on internal notes they don’t have access
to.

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

33.5%