An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. GitLab allows unauthenticated users to download user avatars using the victim's user ID, on private instances that restrict public level visibility.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: GitLab
Published:
Updated: 2024-08-03T01:20:58.796Z
Reserved: 2022-11-07T00:00:00
Link: CVE-2022-3870

No data.

Status : Modified
Published: 2023-01-12T04:15:08.957
Modified: 2024-11-21T07:20:24.350
Link: CVE-2022-3870

No data.