CVE-2022-2884
A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3.1 allows an an authenticated...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3.1 allows an an authenticated user to achieve remote code execution via the Import from GitHub API endpoint
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"11.3.4"},{"fixed":"15.1.5"},{"introduced":"15.2.0"},{"fixed":"15.2.3"},{"introduced":"15.3.0"},{"fixed":"15.3.1"}]}]
Références
- advisory gitlab.com
- advisory gitlab.com
- advisory hackerone.com
- web packetstormsecurity.com
- web nvd.nist.gov