CVE-2022-2992
A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated user to achi...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"11.10.0"},{"fixed":"15.1.6"},{"introduced":"15.2.0"},{"fixed":"15.2.4"},{"introduced":"15.3.0"},{"fixed":"15.3.2"}]}]
Références
- advisory gitlab.com
- advisory gitlab.com
- advisory hackerone.com
- web packetstormsecurity.com
- web nvd.nist.gov