Vulnerability Database

308,379

Total vulnerabilities in the database

CVE-2022-1999

An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1. Under certain conditions, using the REST API an unprivileged user was able to change labels description.

  • Published: Jul 1, 2022
  • Updated: Nov 16, 2025
  • CVE: CVE-2022-1999
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 3.1
  • AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Software From Fixed in
gitlab / gitlab 15.1.0 15.1.0.x
gitlab / gitlab 15.0.0 15.0.4
gitlab / gitlab 8.13.0 14.10.5