CVE-2022-2459

LowCVSS 2.7/10Last modified Jun 17, 2026

Description

An issue has been discovered in GitLab EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible for email invited members to join a project even after the Group Owner has enabled the setting to prevent members from being added to projects in a group, if the invite was sent before the setting was enabled.

Metrics

CVSS 3.1 2.7/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published: Aug 5, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-245905.4A stored cross-site scripting (XSS) vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web CVE-2022-245945.3In waline 1.6.1, an attacker can submit messages using X-Forwarded-For to forge any IP address.CVE-2022-245959.8Automotive Grade Linux Kooky Koi 11.0.0, 11.0.1, 11.0.2, 11.0.3, 11.0.4, and 11.0.5 is affected by Incorrect Access Control in usr/bin/afb-d CVE-2022-245996.5In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker CVE-2022-24609.8The WPDating WordPress plugin before 7.4.0 does not properly escape user input before concatenating it to certain SQL queries, leading to mu CVE-2022-246009.8Luocms v2.0 is affected by SQL Injection through /admin/login.php. An attacker can log in to the background through SQL injection statements CVE-2022-246017.5Luocms v2.0 is affected by SQL Injection in /admin/manager/admin_mod.php. An attacker can obtain sensitive information through SQL injection CVE-2022-246029.8Luocms v2.0 is affected by SQL Injection in /admin/news/news_mod.php.CVE-2022-246039.8Luocms v2.0 is affected by SQL Injection in /admin/news/sort_mod.php.CVE-2022-246049.8Luocms v2.0 is affected by SQL Injection in /admin/link/link_mod.php.CVE-2022-246059.8Luocms v2.0 is affected by SQL Injection in /admin/link/link_ok.php.CVE-2022-246069.8Luocms v2.0 is affected by SQL Injection in /admin/news/sort_ok.php.