Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-1124 EUVD-2022-24467GHSA-fcmm-jq9f-cc5p

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior …

Published May 11, 2022 · Updated Aug 2, 2024 · Assigned by GitLab

Description

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0, allowing Guest project members to access trace log of jobs when it is enabled

Affected products

VendorProductAffectedFixed
GitLab GitLab <14.8.6, >=14.9.0, <14.9.4, >=14.10.0, <14.10.1 —

References