A vulnerability, which was classified as critical, was found in GitLab Community Edition and Enterprise Edition up to 15.3.4/15.4.3/15.5.1. The affected element is an unknown function of the component URL Handler. Such manipulation leads to open redirect.
This vulnerability is uniquely identified as CVE-2022-3486. The attack can be launched remotely. No exploit exists.
You should upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2022-3486 | GitLab Community Edition/Enterprise Edition up to 15.3.4/15.4.3/15.5.1 URL redirect (Issue 377810 / EUVD-2022-42858)
A vulnerability, which was classified as critical, was found in GitLab Community Edition and Enterprise Edition up to 15.3.4/15.4.3/15.5.1. The affected element is an unknown function of the component URL Handler. Such manipulation leads…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR