GCVE - cpe:2.3:a:gitlab:gitlab:15.1.0:*:*:*:enterprise:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gitlab:gitlab:15.1.0:*:*:*:enterprise:*:*:*

part: a version: 15.1.0 update: *

Vendor	Gitlab (`57573e99-56e6-5fad-895e-0ce7fffc5b90`)
Product	Gitlab (`5414fcda-a172-5f72-b6e4-b415a19d21eb`)
Edition	*
Language	*
Software edition	enterprise
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:gitlab/gitlab-org/gitlab`	purl2cpe	2026-06-01 10:14:46.293564

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-2281`	vulnerable	2026-06-08 05:43:35.193045	Details available LOW (2.6) An information disclosure vulnerability in GitLab EE affecting all versions from 12.5 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows disclosure of release titles if group milestones are associated with any project releases. Published: 2022-07-01T15:48:46.000Z Updated: 2024-08-03T00:32:09.342Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/271172 https://hackerone.com/reports/1012659 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2281.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2270`	vulnerable	2026-06-08 05:43:35.164778	Details available LOW (3.5) An issue has been discovered in GitLab affecting all versions starting from 12.4 before 14.10.5, all versions starting from 15.0 before 15.0.4, all versions starting from 15.1 before 15.1.1. GitLab was leaking Conan packages names due to incorrect permissions verification. Published: 2022-07-01T16:31:47.000Z Updated: 2024-08-03T00:32:09.374Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/223074 https://hackerone.com/reports/901473 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2270.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2250`	vulnerable	2026-06-08 05:43:35.114759	Details available MEDIUM (4.7) An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows an attacker to redirect users to an arbitrary location if they trust the URL. Published: 2022-07-01T15:03:14.000Z Updated: 2024-08-03T00:32:09.428Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/355509 https://hackerone.com/reports/1506126 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2250.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2244`	vulnerable	2026-06-08 05:43:35.104692	Details available MEDIUM (4.3) An improper authorization vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows project memebers with reporter role to manage issues in project's error tracking feature. Published: 2022-07-01T15:04:24.000Z Updated: 2024-08-03T00:32:09.492Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/360666 https://hackerone.com/reports/1619583 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2244.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2243`	vulnerable	2026-06-08 05:43:35.103839	Details available MEDIUM (5) An access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows authenticated users to enumerate issues in non-linked sentry projects. Published: 2022-07-01T15:52:32.000Z Updated: 2024-08-03T00:32:09.539Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/360666 https://hackerone.com/reports/1546138 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2243.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2235`	vulnerable	2026-06-08 05:43:35.086209	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2230`	vulnerable	2026-06-08 05:43:35.064873	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2229`	vulnerable	2026-06-08 05:43:35.063493	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2228`	vulnerable	2026-06-08 05:43:35.062432	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2227`	vulnerable	2026-06-08 05:43:35.061146	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2185`	vulnerable	2026-06-08 05:42:50.409922	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1999`	vulnerable	2026-06-08 05:39:14.345429	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1983`	vulnerable	2026-06-08 05:39:14.322108	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1981`	vulnerable	2026-06-08 05:39:14.318641	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1963`	vulnerable	2026-06-08 05:39:14.294606	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1954`	vulnerable	2026-06-08 05:39:14.279133	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.