Vulnerability Database

300,926

Total vulnerabilities in the database

CVE-2022-3486

An open redirect vulnerability in GitLab EE/CE affecting all versions from 9.3 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2, allows an attacker to redirect users to an arbitrary location if they trust the URL.

  • Published: Nov 10, 2022
  • Updated: Apr 14, 2023
  • CVE: CVE-2022-3486
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

Software From Fixed in
gitlab / gitlab 15.4.0 15.4.4
gitlab / gitlab 15.5.0 15.5.2
gitlab / gitlab 9.4.0 15.3.5