CVE-2022-2992

CRITICAL9.9EPSS 91.2%
發布日:2024/3/6修改日:2025/4/3

描述

A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint.

受影響套件(1)

  • Bitnami/gitlab>= 11.10.0, < 15.1.6, >= 15.2.0, < 15.2.4, >= 15.3.0, < 15.3.2

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1CRITICAL9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

參考連結(5)