CVE-2022-3482

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 11.3 through 15.3.4 GitLab CE/EE versions 15.4 through 15.4.3 GitLab CE/EE versions 15.5 through 15.5.1

Description An issue with access control in GitLab CE/EE allowed unauthorized users to view release names, even when releases were restricted to project members only.

Recommendations For GitLab CE/EE versions 11.3 through 15.3.4, update to version 15.3.5 or later. For GitLab CE/EE versions 15.4 through 15.4.3, update to version 15.4.4 or later. For GitLab CE/EE versions 15.5 through 15.5.1, update to version 15.5.2 or later.