CVE-2022-2992
critical · 9.9A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint.
9.9
CVSS
86.2%
EPSS (exploit prob.)
100th
EPSS percentile
2022-10-17
Published
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-74
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| gitlab | gitlab | >= 11.10, < 15.1.6 |
| gitlab | gitlab | >= 11.10, < 15.1.6 |
| gitlab | gitlab | >= 15.2, < 15.2.4 |
| gitlab | gitlab | >= 15.2, < 15.2.4 |
| gitlab | gitlab | >= 15.3, < 15.3.2 |
| gitlab | gitlab | >= 15.3, < 15.3.2 |
Check a specific version with /api/v1/cve/match.
References
- http://packetstormsecurity.com/files/171008/GitLab-GitHub-Repo-Import-Deserialization-Remote-Code-Execution.html
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2992.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/371884
- https://hackerone.com/reports/1679624
- http://packetstormsecurity.com/files/171008/GitLab-GitHub-Repo-Import-Deserialization-Remote-Code-Execution.html
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2992.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/371884
- https://hackerone.com/reports/1679624
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2022-2992