Vulnerability Database

317,828

Total vulnerabilities in the database

CVE-2022-3285

Bypass of healthcheck endpoint allow list affecting all versions from 12.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an unauthorized attacker to prevent access to GitLab

  • Published: Nov 9, 2022
  • Updated: Nov 16, 2025
  • CVE: CVE-2022-3285
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

No CWE or OWASP classifications available.

Software From Fixed in
gitlab / gitlab 15.4.0 15.4.0.x
gitlab / gitlab 15.3.0 15.3.4
gitlab / gitlab 12.0.0 15.2.5