CVE-2022-3288

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>rubygem-gitlab_meta</name>
	<range><lt>15.2.5</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>A branch/tag name confusion in GitLab CE/EE affecting all versions
	prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows
	an attacker to manipulate pages where the content of the default
	branch would be expected.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2022-3288</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2022-3288</url>
    </references>
    <dates>
      <discovery>2022-10-17</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>