GitLab 13.5 < 15.4.6 / 15.5 < 15.5.5 / 15.6 < 15.6.1 (CVE-2022-3572)

Version 1.3

Jan 27, 2023, 4:02 PM

CVSS metrics ("CVSSv2 score" changed from "4.9" to "3.5")
CVSS metrics ("CVSSv2 vector" changed from "CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:N" to "CVSS2#AV:N/AC:M/Au:S/C:N/I:P/A:N")
CVSS metrics ("CVSSv3 score" changed from "5.4" to "6.1")
CVSS metrics ("CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N")
CVSSv2 severity (based on CVE-2022-3572, severity decreased from "Medium" to "Low")
CVSSv3 score source (set to "CVE-2022-3572")
Exploit attributes ("Exploit available" set to "False")