CVE-2022-4201

LOW · CVSS 3.5 EPSS 0.55%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-01-27 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-4201

Severity

LOW

CVSS

3.5

EPSS

0.55%

GitLab

Original NVD Description

A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to local addresses when configuring a malicious GitLab Runner.