CVE-2022-3018

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a project maintainer to access the DataDog integration API key from webhook logs.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

No affected versions have been published.

Timeline

Published
Oct 28, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-301807.8Azure RTOS GUIX Studio Information Disclosure VulnerabilityCVE-2022-301816.5Azure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-301845.5.NET and Visual Studio Information Disclosure VulnerabilityCVE-2022-301874.7Azure Storage Library Information Disclosure VulnerabilityCVE-2022-301887.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2022-301896.5Windows Autopilot Device Management and Enrollment Client Spoofing VulnerabilityCVE-2022-30198.8The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that we can see (bruteforcCVE-2022-301907.8A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attackerCVE-2022-301928.3Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-301937.8AV1 Video Extension Remote Code Execution VulnerabilityCVE-2022-301947.5Windows WebBrowser Control Remote Code Execution VulnerabilityCVE-2022-301968.2Windows Secure Channel Denial of Service Vulnerability
CVE-2022-3018: Medium severity, CVSS 4.9 | Vulnix