CVE-2022-1157

2.4 lowEPSS 0.6%

Low (2.4) in gitlab gitlab. EPSS 0.6% chance of exploitation in the next 30 days.

Missing sanitization of logged exception messages in all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 of GitLab CE/EE causes potential sensitive values in invalid URLs to be logged

Severity

CVSS 3.1

2.4 low

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2022-04-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gitlab:gitlab

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1157.json
https://gitlab.com/gitlab-org/gitlab/-/issues/37261
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1157.json
https://gitlab.com/gitlab-org/gitlab/-/issues/37261

Check your stack JSON