CVE-2022-2270

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An issue has been discovered in GitLab affecting all versions starting from 12.4 before 14.10.5, all versions starting from 15.0 before 15.0.4, all versions starting from 15.1 before 15.1.1. GitLab was leaking Conan packages names due to incorrect permissions verification.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-276

Affected software

No affected versions have been published.

Timeline

Published
Jul 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-227005.3CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource, exposes the response header 'X-CFY-TX-TM'. In cerCVE-2022-227016.5PartKeepr versions up to v1.4.0, loads attachments using a URL while creating a part and allows the use of the 'file://' URI scheme, allowinCVE-2022-227024.3PartKeepr versions up to v1.4.0, in the functionality to upload attachments using a URL when creating a part does not validate that requestsCVE-2022-227035.5In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exCVE-2022-227049.8The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the design incorrectly expeCVE-2022-227067.8Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 througCVE-2022-227075.9In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bCVE-2022-227097.8VP9 Video Extensions Remote Code Execution VulnerabilityCVE-2022-22714.8The WP Database Backup WordPress plugin before 5.9 does not escape some of its settings, which could allow high privilege users such as admiCVE-2022-227105.5Windows Common Log File System Driver Denial of Service VulnerabilityCVE-2022-227115.7Windows BitLocker Information Disclosure VulnerabilityCVE-2022-227125.6Windows Hyper-V Denial of Service Vulnerability
CVE-2022-2270: Medium severity, CVSS 5.3 | Vulnix