CVE-2022-4342

MEDIUM · CVSS 5.5 EPSS 0.73%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-01-12 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-4342

Severity

MEDIUM

CVSS

5.5

EPSS

0.73%

GitLab

Original NVD Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.1 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. A malicious Maintainer can leak masked webhook secrets by changing target URL of the webhook.