Vulnerability identifier: #VU61775

Vulnerability risk: High

CVSSv3.1: 8.2 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C]

CVE-ID: CVE-2022-1162

CWE-ID: CWE-798

Exploitation vector: Network

Exploits in database: 4

• November 10, 2022
  • CVE-2022-1162 (A simple tool to enumerate users in gitlab) [Github]
• May 13, 2022
  • Gitlab 14.9 - Authentication Bypass [Exploit-DB]
• April 26, 2022
  • Gitlab 14.9 Authentication Bypass [Packet Storm]
• April 12, 2022
  • CVE-2022-1162 () [Github]

Impact: Information disclosure and data manipulation

Vulnerable software:
Gitlab Community Edition
Universal components / Libraries / Software for developers
GitLab Enterprise Edition
Universal components / Libraries / Software for developers

Vendor: GitLab, Inc