CVE-2022-3060: GitLab

High severity, CVSS 7.3. EPSS: 1% chance of exploitation in the next 30 days.

Improper control of a resource identifier in Error Tracking in GitLab CE/EE affecting all versions from 12.7 allows an authenticated attacker to generate content which could cause a victim to make unintended arbitrary requests

Affected products

• GitLab GitLab: up to and including 12.7.0

Published 2022-10-17. Last modified 2026-06-17.