UpHeron
All vulnerabilities

Servers and applications

CVE-2022-3060

Improper control of a resource identifier in Error Tracking in GitLab CE/EE affecting all versions from 12.7 allows an authenticated attacker to generate content which could cause a victim to make unintended arbitrary requests

Severity
High 7.3
Published
17 Oct 2022
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
GitLabServers and applications · cpe:a:gitlab:gitlab
  • Every version up to 12.7.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-3060
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-3060