CVE-2022-0373: GitLab

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4, and 12.6 to 14.7.1 allows project non-members to retrieve the service desk email address

Affected products

• GitLab GitLab: from 12.4.0, before 14.7.1 (fixed in 14.7.1)

Published 2022-04-01. Last modified 2026-06-17.