GitLab 15.6.0 Community Edition

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:gitlab:gitlab:15.6.0:*:*:*:community:*:*:*

part: a version: 15.6.0 update: *

VendorGitlab (57573e99-56e6-5fad-895e-0ce7fffc5b90)
ProductGitlab (5414fcda-a172-5f72-b6e4-b415a19d21eb)
Edition*
Language*
Software editioncommunity
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:gitlab/gitlab-org/gitlab purl2cpe 2026-06-01 10:14:46.305617

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4255 vulnerable 2026-06-08 05:51:37.061931 Details available
MEDIUM (4.3)
An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload.
Published: 2023-01-27T00:00:00.000Z
Updated: 2025-03-27T20:17:04.693Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4205 vulnerable 2026-06-08 05:51:36.969500 Details available
MEDIUM (6.3)
In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash.
Published: 2023-01-27T00:00:00.000Z
Updated: 2025-03-27T20:21:18.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4201 vulnerable 2026-06-08 05:51:36.963617 Details available
LOW (3.5)
A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to local addresses when configuring a malicious GitLab Runner.
Published: 2023-01-27T00:00:00.000Z
Updated: 2025-03-27T20:20:58.630Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4092 vulnerable 2026-06-08 05:51:36.706556 Details available
MEDIUM (5.7)
An issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1. It was possible to create a malicious README page due to improper neutralisation of user supplied input.
Published: 2023-01-24T00:00:00.000Z
Updated: 2025-04-01T17:36:33.623Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4054 vulnerable 2026-06-08 05:51:36.661488 Details available
MEDIUM (5.5)
An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions starting from 15.6 before 15.6.1. It was possible for a project maintainer to leak a webhook secret token by changing the webhook URL to an endpoint that allows them to capture request headers.
Published: 2023-01-24T00:00:00.000Z
Updated: 2025-04-02T15:15:52.961Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3902 vulnerable 2026-06-08 05:48:22.576456 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3820 vulnerable 2026-06-08 05:48:22.379161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3740 vulnerable 2026-06-08 05:48:21.811695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3572 vulnerable 2026-06-08 05:48:21.449242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3482 vulnerable 2026-06-08 05:48:21.247517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3478 vulnerable 2026-06-08 05:48:21.150361 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.