Home > Vulnerability Database > CVE-2022-4205

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2022-4205

Good to know:

Date: January 26, 2023

In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash.

Language: Ruby

Severity Score

6.3

Related Resources (5)

Url: https://nvd.nist.gov/vuln/detail/CVE-2022-4205

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2022-4205

Url: https://gitlab.com/gitlab-org/gitlab/-/issues/374082

Url: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4205.json

Url: https://www.mend.io/vulnerability-database/CVE-2022-4205

Severity Score

6.3

Weakness Type (CWE)

Access of Resource Using Incompatible Type ('Type Confusion')

CWE-843

Top Fix

Upgrade Version

Upgrade to version v15.4.6-ee,v15.5.5-ee,v15.6.1-ee

CVSS v3.1

Base Score:	6.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	REQUIRED
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	HIGH
Availability (A):	LOW

Do you need more information?

Contact Us