PoC Index

CVE-2022-2185

CRITICAL 9.9EPSS 76.9%

A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 where an authenticated user authorized to import projects could import a maliciously crafted project leading to remote code execution.

CVSS v3.1
8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1
9.9 CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v2.0
7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
76.88% chance of exploitation in the next 30 days, 100th percentile
Nuclei
high · CWE-78
Published
2022-07-01
Updated
2024-08-03

Proof-of-concept exploits (2)

Nuclei templates (1)

References

Related