Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2022-0172

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3. Under certain conditions it was possible to bypass the IP restriction for public projects through GraphQL allowing unauthorised users to read titles of issues, merge requests and milestones.

  • Published: Jan 18, 2022
  • Updated: Nov 16, 2025
  • CVE: CVE-2022-0172
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2:

  • Severity: Medium
  • Score: 6.4
  • AV:N/AC:L/Au:N/C:P/I:P/A:N

CWEs:

Software From Fixed in
gitlab / gitlab 14.5.0 14.5.3
gitlab / gitlab 14.6.0 14.6.2
gitlab / gitlab 13.2 14.4.5