CVE-2022-2884 : A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1

A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3.1 allows an an authenticated user to achieve remote code execution via the Import from GitHub API endpoint

Published 2022-10-17 16:15:21

Updated 2023-04-03 20:15:08

Source GitLab Inc.

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2022-2884

Gitlab » Gitlab » Enterprise Edition
Versions from including (>=) 11.3.4 and before (<) 15.1.5
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Matching versions
Gitlab » Gitlab » Community Edition
Versions from including (>=) 15.3 and before (<) 15.3.1
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Matching versions
Gitlab » Gitlab » Community Edition
Versions from including (>=) 11.3.4 and before (<) 15.1.5
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Matching versions
Gitlab » Gitlab » Community Edition
Versions from including (>=) 15.2 and before (<) 15.2.3
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Matching versions
Gitlab » Gitlab » Enterprise Edition
Versions from including (>=) 15.2 and before (<) 15.2.3
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Matching versions
Gitlab » Gitlab » Enterprise Edition
Versions from including (>=) 15.3 and before (<) 15.3.1
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2022-2884

EPSS FAQ

0.86%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 83 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-2884

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
9.9	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	3.1	6.0	GitLab Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High
9.9	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	3.1	6.0	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2022-2884

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2022-2884

https://gitlab.com/gitlab-org/gitlab/-/issues/371098

RCE via github import (#371098) · Issues · GitLab.org / GitLab · GitLab
Third Party Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2884.json

2022/CVE-2022-2884.json · master · GitLab.org / cves · GitLab
Third Party Advisory
http://packetstormsecurity.com/files/171628/GitLab-15.3-Remote-Code-Execution.html

GitLab 15.3 Remote Code Execution ≈ Packet Storm
https://hackerone.com/reports/1672388

HackerOne
Permissions Required;Third Party Advisory

Jump to

Vulnerability Details : CVE-2022-2884

Products affected by CVE-2022-2884

Exploit prediction scoring system (EPSS) score for CVE-2022-2884

CVSS scores for CVE-2022-2884

CWE ids for CVE-2022-2884

References for CVE-2022-2884