GitLab 15.6.0 Enterprise Edition

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:gitlab:gitlab:15.6.0:*:*:*:enterprise:*:*:*

part: a version: 15.6.0 update: *

VendorGitlab (57573e99-56e6-5fad-895e-0ce7fffc5b90)
ProductGitlab (5414fcda-a172-5f72-b6e4-b415a19d21eb)
Edition*
Language*
Software editionenterprise
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:gitlab/gitlab-org/gitlab purl2cpe 2026-06-01 10:14:46.305619

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4255 vulnerable 2026-06-08 05:51:37.062037 Details available
MEDIUM (4.3)
An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload.
Published: 2023-01-27T00:00:00.000Z
Updated: 2025-03-27T20:17:04.693Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4205 vulnerable 2026-06-08 05:51:36.969518 Details available
MEDIUM (6.3)
In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash.
Published: 2023-01-27T00:00:00.000Z
Updated: 2025-03-27T20:21:18.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4201 vulnerable 2026-06-08 05:51:36.963640 Details available
LOW (3.5)
A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to local addresses when configuring a malicious GitLab Runner.
Published: 2023-01-27T00:00:00.000Z
Updated: 2025-03-27T20:20:58.630Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4092 vulnerable 2026-06-08 05:51:36.706583 Details available
MEDIUM (5.7)
An issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1. It was possible to create a malicious README page due to improper neutralisation of user supplied input.
Published: 2023-01-24T00:00:00.000Z
Updated: 2025-04-01T17:36:33.623Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4054 vulnerable 2026-06-08 05:51:36.662513 Details available
MEDIUM (5.5)
An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions starting from 15.6 before 15.6.1. It was possible for a project maintainer to leak a webhook secret token by changing the webhook URL to an endpoint that allows them to capture request headers.
Published: 2023-01-24T00:00:00.000Z
Updated: 2025-04-02T15:15:52.961Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3902 vulnerable 2026-06-08 05:48:22.576603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3820 vulnerable 2026-06-08 05:48:22.379180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3740 vulnerable 2026-06-08 05:48:21.811806 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3572 vulnerable 2026-06-08 05:48:21.449356 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3482 vulnerable 2026-06-08 05:48:21.247537 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3478 vulnerable 2026-06-08 05:48:21.151467 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.