A vulnerability, which was classified as problematic, has been found in GitLab Community Edition and Enterprise Edition up to 15.5.6/15.6.3/15.7.1. This impacts an unknown function of the component User Avatar Handler. The manipulation leads to information disclosure.
This vulnerability is documented as CVE-2022-3870. The attack can be initiated remotely. There is not any exploit available.
It is advisable to upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2022-3870 | GitLab Community Edition/Enterprise Edition up to 15.5.6/15.6.3/15.7.1 User Avatar information disclosure (Issue 381647 / EUVD-2022-43207)
A vulnerability, which was classified as problematic, has been found in GitLab Community Edition and Enterprise Edition up to 15.5.6/15.6.3/15.7.1. This impacts an unknown function of the component User Avatar Handler. The manipulation…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR