A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3.1 allows an an authenticated user to achieve remote code execution via the Import from GitHub API endpoint
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-2884US | critical9.9 | Exploit | ||
A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3.1 allows an an authenticated user to achieve remote code ex… | ||||
02
references
External citations — patches, advisories, analysis.
- http://packetstormsecurity.com/files/171628/GitLab-15.3-Remote-Code-Execution.htmlWEB
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2884.jsonADVISORY
- https://gitlab.com/gitlab-org/gitlab/-/issues/371098ADVISORY
- https://hackerone.com/reports/1672388ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2022-2884WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan