GCVE - cpe:2.3:a:gitlab:gitlab:14.10.0:*:*:*:enterprise:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gitlab:gitlab:14.10.0:*:*:*:enterprise:*:*:*

part: a version: 14.10.0 update: *

Vendor	Gitlab (`57573e99-56e6-5fad-895e-0ce7fffc5b90`)
Product	Gitlab (`5414fcda-a172-5f72-b6e4-b415a19d21eb`)
Edition	*
Language	*
Software edition	enterprise
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:gitlab/gitlab-org/gitlab`	purl2cpe	2026-06-01 10:14:46.234725

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-1545`	vulnerable	2026-06-08 05:39:13.397769	Details available MEDIUM (4.3) It was possible to disclose details of confidential notes created via the API in Gitlab CE/EE affecting all versions from 13.2 prior to 14.8.6, 14.9 prior to 14.9.4, and 14.10 prior to 14.10.1 if an unauthorised project member was tagged in the note. Published: 2022-05-11T14:25:17.000Z Updated: 2024-08-03T00:10:02.897Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/351030 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1545.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1510`	vulnerable	2026-06-08 05:39:13.327600	Details available MEDIUM (6.5) An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly handling malicious text in the CI Editor and CI Pipeline details page allowing the attacker to cause uncontrolled resource consumption. Published: 2022-05-11T14:48:22.000Z Updated: 2024-08-03T00:03:06.350Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/343276 https://hackerone.com/reports/1353058 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1510.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1460`	vulnerable	2026-06-08 05:39:13.186782	Details available MEDIUM (6.1) An issue has been discovered in GitLab affecting all versions starting from 9.2 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not performing correct authorizations on scheduled pipelines allowing a malicious user to run a pipeline in the context of another user. Published: 2022-05-11T14:45:11.000Z Updated: 2024-08-03T00:03:06.291Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/118782 https://hackerone.com/reports/755078 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1460.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1433`	vulnerable	2026-06-08 05:39:13.154226	Details available LOW (2.6) An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. Missing invalidation of Markdown caching causes potential payloads from a previously exploitable XSS vulnerability (CVE-2022-1175) to persist and execute. Published: 2022-05-11T14:27:44.000Z Updated: 2024-08-03T00:03:06.378Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/357930 https://hackerone.com/reports/1528829 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1433.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1431`	vulnerable	2026-06-08 05:39:13.152934	Details available MEDIUM (4.3) An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly handling malicious requests to the PyPi API endpoint allowing the attacker to cause uncontrolled resource consumption. Published: 2022-05-10T20:27:54.000Z Updated: 2024-08-03T00:03:06.272Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/262724 https://hackerone.com/reports/996850 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1431.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1428`	vulnerable	2026-06-08 05:39:13.146693	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1426`	vulnerable	2026-06-08 05:39:13.145280	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1423`	vulnerable	2026-06-08 05:39:13.144150	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1417`	vulnerable	2026-06-08 05:39:13.136736	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1416`	vulnerable	2026-06-08 05:39:13.136071	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1413`	vulnerable	2026-06-08 05:39:13.127551	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1406`	vulnerable	2026-06-08 05:39:13.120347	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1352`	vulnerable	2026-06-08 05:39:12.785131	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1124`	vulnerable	2026-06-08 05:39:12.258565	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.