CVE-2022-1157: GitLab

Low severity, CVSS 2.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Missing sanitization of logged exception messages in all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 of GitLab CE/EE causes potential sensitive values in invalid URLs to be logged

Affected products

• GitLab GitLab: before 14.7.7 (fixed in 14.7.7); from 14.8.0, before 14.8.5 (fixed in 14.8.5); from 14.9.0, before 14.9.2 (fixed in 14.9.2)

Published 2022-04-11. Last modified 2026-06-17.