CVE-2022-0751

Published: Mar 28, 2022Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets with misleading content which could trick unsuspecting users into executing arbitrary commands

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	10.0 ≤ version < 14.6.5
Gitlab Gitlab	14.7 ≤ version < 14.7.4
Gitlab Gitlab	14.8 ≤ version < 14.8.2
Gitlab Gitlab	10.0 ≤ version < 14.6.5
Gitlab Gitlab	14.7 ≤ version < 14.7.4
Gitlab Gitlab	14.8 ≤ version < 14.8.2