GitLab < 15.5.7 / 15.6 < 15.6.4 / 15.7 < 15.7.2 (CVE-2022-4037)

Language:

Version 1.2 Feb 16, 2023, 6:11 PM IAVM reference Plugin Feed: 202302161811
Version 1.1 Feb 9, 2023, 1:59 PM CVSS metrics ("CVSSv2 score" changed from "4.9" to "7.1") CVSS metrics ("CVSSv2 vector" changed from "CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:N" to "CVSS2#AV:N/AC:H/Au:S/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" changed from "6.4" to "8.5") CVSS metrics ("CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" to "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H") CVSSv2 severity (based on CVE-2022-4037, severity increased from "Medium" to "High") CVSSv3 score source (set to "CVE-2022-4037") CVSSv3 severity (based on CVE-2022-4037, severity increased from "Medium" to "High") Plugin Feed: 202302091359
Version 1.0 Feb 8, 2023, 8:09 PM New Plugin Feed: 202302082009

* Changelogs are generally available for changes made after Nov 1, 2022