CVE-2022-1105

MEDIUM · CVSS 4.3 EPSS 0.75%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-04-04 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-1105

Severity

MEDIUM

CVSS

4.3

EPSS

0.75%

GitLab

Original NVD Description

An improper access control vulnerability in GitLab CE/EE affecting all versions from 13.11 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an unauthorized user to access pipeline analytics even when public pipelines are disabled