CVE-2022-4167

MEDIUM · CVSS 5.3 EPSS 0.54%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-01-12 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-4167

Severity

MEDIUM

CVSS

5.3

EPSS

0.54%

GitLab

Original NVD Description

Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2 allows group access tokens to continue working even after the group owner loses the ability to revoke them.