CVE-2022-0751

Published: Mar 28, 2022Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets with misleading content which could trick unsuspecting users into executing arbitrary commands

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 10.0 to 14.6.5
Gitlab Gitlab	From 14.7 to 14.7.4
Gitlab Gitlab	From 14.8 to 14.8.2
Gitlab Gitlab	From 10.0 to 14.6.5
Gitlab Gitlab	From 14.7 to 14.7.4
Gitlab Gitlab	From 14.8 to 14.8.2