GitLab 15.1.0 Community Edition

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:gitlab:gitlab:15.1.0:*:*:*:community:*:*:*

part: a version: 15.1.0 update: *

VendorGitlab (57573e99-56e6-5fad-895e-0ce7fffc5b90)
ProductGitlab (5414fcda-a172-5f72-b6e4-b415a19d21eb)
Edition*
Language*
Software editioncommunity
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:gitlab/gitlab-org/gitlab purl2cpe 2026-06-01 10:14:46.293562

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2270 vulnerable 2026-06-08 05:43:35.164667 Details available
LOW (3.5)
An issue has been discovered in GitLab affecting all versions starting from 12.4 before 14.10.5, all versions starting from 15.0 before 15.0.4, all versions starting from 15.1 before 15.1.1. GitLab was leaking Conan packages names due to incorrect permissions verification.
Published: 2022-07-01T16:31:47.000Z
Updated: 2024-08-03T00:32:09.374Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2250 vulnerable 2026-06-08 05:43:35.114732 Details available
MEDIUM (4.7)
An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows an attacker to redirect users to an arbitrary location if they trust the URL.
Published: 2022-07-01T15:03:14.000Z
Updated: 2024-08-03T00:32:09.428Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2244 vulnerable 2026-06-08 05:43:35.104668 Details available
MEDIUM (4.3)
An improper authorization vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows project memebers with reporter role to manage issues in project's error tracking feature.
Published: 2022-07-01T15:04:24.000Z
Updated: 2024-08-03T00:32:09.492Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2243 vulnerable 2026-06-08 05:43:35.103813 Details available
MEDIUM (5)
An access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows authenticated users to enumerate issues in non-linked sentry projects.
Published: 2022-07-01T15:52:32.000Z
Updated: 2024-08-03T00:32:09.539Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2230 vulnerable 2026-06-08 05:43:35.064770 Details available
HIGH (8.1)
A Stored Cross-Site Scripting vulnerability in the project settings page in GitLab CE/EE affecting all versions from 14.4 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows an attacker to execute arbitrary JavaScript code in GitLab on a victim's behalf.
Published: 2022-07-01T15:55:13.000Z
Updated: 2024-08-03T00:32:09.532Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2229 vulnerable 2026-06-08 05:43:35.063392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2227 vulnerable 2026-06-08 05:43:35.060142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2185 vulnerable 2026-06-08 05:42:50.409098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1999 vulnerable 2026-06-08 05:39:14.345410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1963 vulnerable 2026-06-08 05:39:14.294506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1954 vulnerable 2026-06-08 05:39:14.278289 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.