CVE-2022-1983 | BDVDB-2026-179331 Detail

Description#

Incorrect authorization in GitLab EE affecting all versions from 10.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allowed an attacker already in possession of a valid Deploy Key or a Deploy Token to misuse it from any location to access Container Registries even when IP address restrictions were configured.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12022-07-01Record published in the CVE List.
2. Version 22024-08-03Most recent update recorded in the CVE List.