CVE-2022-4342: GitLab

Low severity, CVSS 3.8. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.1 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. A malicious Maintainer can leak masked webhook secrets by changing target URL of the webhook.

Affected products

• GitLab GitLab: from 15.1.0, before 15.5.7 (fixed in 15.5.7); from 15.6.0, before 15.6.4 (fixed in 15.6.4); from 15.7.0, before 15.7.2 (fixed in 15.7.2)

Published 2023-01-12. Last modified 2026-06-17.