CVE-2022-4335

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

A blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which allows an attacker to connect to a local host.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-918

Affected software

Vendor	Product	Versions
GitLab	GitLab	<15.4.6; >=15.5, <15.5.5; >=15.6, <15.6.1

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4335.jsonVendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/353018Exploit, Issue Tracking, Vendor Advisory
https://hackerone.com/reports/1462437Permissions Required, Third Party Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4335.jsonVendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/353018Exploit, Issue Tracking, Vendor Advisory
https://hackerone.com/reports/1462437Permissions Required, Third Party Advisory

Timeline

Published: Jan 27, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-433507.2Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.CVE-2022-433516.5Sanitization Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php CVE-2022-433527.2Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.CVE-2022-433537.2Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view CVE-2022-433547.2Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/mana CVE-2022-433557.2Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.CVE-2022-433577.5Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which CVE-2022-433587.5Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can CVE-2022-433597.8Gifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was discovered to contain an out-of-bounds read in the function read_image_data. This CVE-2022-43365.4In BAOTA linux panel there exists a stored xss vulnerability attackers can use to obtain sensitive information via the log analysis feature.CVE-2022-433614.8Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component pop_chart.ph CVE-2022-433627.2Senayan Library Management System v9.4.2 was discovered to contain a SQL injection vulnerability via the collType parameter at loan_by_class