CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.1. It affects GitLab.
CVE
CVE-2022-3706
Severity
LOW
CVSS
3.1
EPSS
0.51%
GitLab
Original NVD Description
Improper authorization in GitLab CE/EE affecting all versions from 7.14 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a user retrying a job in a downstream pipeline to take ownership of the retried jobs in the upstream pipeline even if the user doesn't have access to that project.
Related CVEs
Other vulnerabilities affecting the same vendor(s)