GCVE - cpe:2.3:a:gitlab:gitlab:15.2:*:*:*:community:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gitlab:gitlab:15.2:*:*:*:community:*:*:*

part: a version: 15.2 update: *

Vendor	Gitlab (`57573e99-56e6-5fad-895e-0ce7fffc5b90`)
Product	Gitlab (`5414fcda-a172-5f72-b6e4-b415a19d21eb`)
Edition	*
Language	*
Software edition	community
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:gitlab/gitlab-org/gitlab`	purl2cpe	2026-06-01 10:14:46.305571

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-2539`	vulnerable	2026-06-08 05:43:35.766613	Details available MEDIUM (5.3) An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1, allowed a project member to filter issues by contact and organization. Published: 2022-08-05T15:09:58.000Z Updated: 2024-08-03T00:39:08.068Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/364315 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2539.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2534`	vulnerable	2026-06-08 05:43:35.758062	Details available LOW (2.2) An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. GitLab was returning contributor emails due to improper data handling in the Datadog integration. Published: 2022-08-05T15:11:53.000Z Updated: 2024-08-03T00:39:08.000Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/361654 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2534.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2512`	vulnerable	2026-06-08 05:43:35.705833	Details available MEDIUM (6.5) An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. Membership changes are not reflected in TODO for confidential notes, allowing a former project members to read updates via TODOs. Published: 2022-08-05T15:09:47.000Z Updated: 2024-08-03T00:39:07.942Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/365742 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2512.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2500`	vulnerable	2026-06-08 05:43:35.683024	Details available MEDIUM (4.4) A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1. A stored XSS flaw in job error messages allows attackers to perform arbitrary actions on behalf of victims at client side. Published: 2022-08-05T15:12:34.000Z Updated: 2024-08-03T00:39:07.807Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/363725 https://hackerone.com/reports/1579645 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2500.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2497`	vulnerable	2026-06-08 05:43:35.681672	Details available HIGH (8.5) An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. A malicious developer could exfiltrate an integration's access token by modifying the integration URL such that authenticated requests are sent to an attacker controlled server. Published: 2022-08-05T15:09:19.000Z Updated: 2024-08-03T00:39:07.794Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/362671 https://hackerone.com/reports/1557992 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2497.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2459`	vulnerable	2026-06-08 05:43:35.591761	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2456`	vulnerable	2026-06-08 05:43:35.587646	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2417`	vulnerable	2026-06-08 05:43:35.507504	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2307`	vulnerable	2026-06-08 05:43:35.271166	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2303`	vulnerable	2026-06-08 05:43:35.262237	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2095`	vulnerable	2026-06-08 05:42:50.258696	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.