GitLab 15.0.0 Enterprise Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:gitlab:gitlab:15.0.0:*:*:*:enterprise:*:*:*
part: a version: 15.0.0 update: *
| Vendor | Gitlab (57573e99-56e6-5fad-895e-0ce7fffc5b90) |
|---|---|
| Product | Gitlab (5414fcda-a172-5f72-b6e4-b415a19d21eb) |
| Edition | * |
| Language | * |
| Software edition | enterprise |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:gitlab/gitlab-org/gitlab |
purl2cpe | 2026-06-01 10:14:46.289635 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-1948 |
vulnerable | 2026-06-08 05:39:14.263944 |
Details available
HIGH (8.7)
An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1. Missing validation of input used in quick actions allowed an attacker to exploit XSS by injecting HTML in contact details.
Published: 2022-07-28T14:46:01.000Z
Updated: 2024-08-03T00:24:42.604Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1944 |
vulnerable | 2026-06-08 05:39:14.258013 |
Details available
MEDIUM (5.4)
When the feature is configured, improper authorization in the Interactive Web Terminal in GitLab CE/EE affecting all versions from 11.3 prior to 14.9.5, 14.10 prior to 14.10.4, and 15.0 prior to 15.0.1 allows users with the Developer role to open terminals on other Developers' running jobs
Published: 2022-06-06T16:58:35.000Z
Updated: 2024-08-03T00:24:42.991Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1940 |
vulnerable | 2026-06-08 05:39:14.252529 |
Details available
HIGH (7.7)
A Stored Cross-Site Scripting vulnerability in Jira integration in GitLab EE affecting all versions from 13.11 prior to 14.9.5, 14.10 prior to 14.10.4, and 15.0 prior to 15.0.1 allows an attacker to execute arbitrary JavaScript code in GitLab on a victim's behalf via specially crafted Jira Issues
Published: 2022-06-06T16:52:22.000Z
Updated: 2024-08-03T00:24:42.587Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1936 |
vulnerable | 2026-06-08 05:39:14.246580 |
Details available
MEDIUM (6.5)
Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1 allowed an attacker already in possession of a valid Project Deploy Token to misuse it from any location even when IP address restrictions were configured
Published: 2022-06-06T16:54:22.000Z
Updated: 2024-08-03T00:24:42.557Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1935 |
vulnerable | 2026-06-08 05:39:14.246110 |
Details available
MEDIUM (6.5)
Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1 allowed an attacker already in possession of a valid Project Trigger Token to misuse it from any location even when IP address restrictions were configured
Published: 2022-06-06T16:50:27.000Z
Updated: 2024-08-03T00:24:42.627Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1821 |
vulnerable | 2026-06-08 05:39:13.997479 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1783 |
vulnerable | 2026-06-08 05:39:13.907746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1680 |
vulnerable | 2026-06-08 05:39:13.695803 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.