All vulnerabilities

Servers and applications

CVE-2022-4205

In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash.

Severity
High 7.5
Published
27 Jan 2023
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
12.9.8, 15.5.5
Sources
NVD

Affected software

SoftwareAffected versions
GitLabServers and applications · cpe:a:gitlab:gitlab
  • From 1.0.0 before 12.9.8
  • From 15.5.0 before 15.5.5
  • Version 15.6.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-4205
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-4205