A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-2992US | critical9.9 | Exploit | ||
A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated user to achieve remote code execution via… | ||||
02
references
External citations — patches, advisories, analysis.
- http://packetstormsecurity.com/files/171008/GitLab-GitHub-Repo-Import-Deserialization-Remote-Code-Execution.htmlWEB
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2992.jsonADVISORY
- https://gitlab.com/gitlab-org/gitlab/-/issues/371884ADVISORY
- https://hackerone.com/reports/1679624ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2022-2992WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan