GCVE - cpe:2.3:a:gitlab:gitlab:15.2:*:*:*:enterprise:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gitlab:gitlab:15.2:*:*:*:enterprise:*:*:*

part: a version: 15.2 update: *

Vendor	Gitlab (`57573e99-56e6-5fad-895e-0ce7fffc5b90`)
Product	Gitlab (`5414fcda-a172-5f72-b6e4-b415a19d21eb`)
Edition	*
Language	*
Software edition	enterprise
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:gitlab/gitlab-org/gitlab`	purl2cpe	2026-06-01 10:14:46.305573

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-2539`	vulnerable	2026-06-08 05:43:35.766471	Details available MEDIUM (5.3) An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1, allowed a project member to filter issues by contact and organization. Published: 2022-08-05T15:09:58.000Z Updated: 2024-08-03T00:39:08.068Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/364315 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2539.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2534`	vulnerable	2026-06-08 05:43:35.757917	Details available LOW (2.2) An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. GitLab was returning contributor emails due to improper data handling in the Datadog integration. Published: 2022-08-05T15:11:53.000Z Updated: 2024-08-03T00:39:08.000Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/361654 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2534.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2531`	vulnerable	2026-06-08 05:43:35.756370	Details available MEDIUM (5.3) An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. GitLab was not performing correct authentication on Grafana API under specific conditions allowing unauthenticated users to perform queries through a path traversal vulnerability. Published: 2022-08-05T15:09:05.000Z Updated: 2024-08-03T00:39:08.030Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/364252 https://hackerone.com/reports/1566306 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2531.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2512`	vulnerable	2026-06-08 05:43:35.705790	Details available MEDIUM (6.5) An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. Membership changes are not reflected in TODO for confidential notes, allowing a former project members to read updates via TODOs. Published: 2022-08-05T15:09:47.000Z Updated: 2024-08-03T00:39:07.942Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/365742 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2512.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2501`	vulnerable	2026-06-08 05:43:35.683494	Details available MEDIUM (5.9) An improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an attacker to bypass IP allow-listing and download artifacts. This attack only bypasses IP allow-listing, proper permissions are still required. Published: 2022-08-05T15:12:09.000Z Updated: 2024-08-03T00:39:07.844Z Open on db.gcve.eu Reference links https://gitlab.com/gitlab-org/gitlab/-/issues/364822 https://hackerone.com/reports/1591412 https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2501.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2500`	vulnerable	2026-06-08 05:43:35.682985	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2499`	vulnerable	2026-06-08 05:43:35.682585	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2498`	vulnerable	2026-06-08 05:43:35.682123	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2497`	vulnerable	2026-06-08 05:43:35.681557	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2459`	vulnerable	2026-06-08 05:43:35.591633	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2456`	vulnerable	2026-06-08 05:43:35.587483	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2417`	vulnerable	2026-06-08 05:43:35.507456	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2326`	vulnerable	2026-06-08 05:43:35.323729	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2307`	vulnerable	2026-06-08 05:43:35.270947	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2303`	vulnerable	2026-06-08 05:43:35.261275	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2095`	vulnerable	2026-06-08 05:42:50.257267	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.