CVE-2022-2992

🗓️ 17 Oct 2022 00:00:00Reported by GitLabType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 2134 Views🌐 WEB

A vulnerability in GitLab CE/EE allows authenticated user to achieve remote code execution via Import from GitHub API endpoint

Reporter	Title	Published	Views	Family All 27
0day.today	GitLab GitHub Repo Import Deserialization Remote Code Execution Exploit	15 Feb 202300:00	–	zdt
GithubExploit	Exploit for Injection in Gitlab	14 Oct 202220:47	–	githubexploit
GithubExploit	Exploit for Injection in Gitlab	8 Oct 202211:42	–	githubexploit
BDU FSTEC	The vulnerability of the import function in GitHub’s software platform, based on Git, for collaborative code development on GitLab, allows a perpetrator to execute arbitrary code.	2 Sep 202200:00	–	bdu_fstec
Circl	CVE-2022-2992	9 Oct 202214:07	–	circl
CNNVD	GitLab 注入漏洞	31 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-2992	17 Oct 202200:00	–	cvelist
Debian CVE	CVE-2022-2992	17 Oct 202200:00	–	debiancve
FreeBSD	Gitlab -- multiple vulnerabilities	30 Aug 202200:00	–	freebsd
Tenable Nessus	FreeBSD : Gitlab -- multiple vulnerabilities (e6b994e2-2891-11ed-9be7-454b1dd82c64)	30 Aug 202200:00	–	nessus

NVD

Vulners

Node

gitlab gitlabRange11.10–15.1.6community

gitlab gitlabRange11.10–15.1.6enterprise

gitlab gitlabRange15.2–15.2.4community

gitlab gitlabRange15.2–15.2.4enterprise

gitlab gitlabRange15.3–15.3.2community

gitlab gitlabRange15.3–15.3.2enterprise

[
  {
    "vendor": "GitLab",
    "product": "GitLab",
    "versions": [
      {
        "version": ">=11.10, <15.1.6",
        "status": "affected"
      },
      {
        "version": ">=15.2, <15.2.4",
        "status": "affected"
      },
      {
        "version": ">=15.3, <15.3.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
hackerone	www.hackerone.com/reports/1679624
packetstormsecurity	www.packetstormsecurity.com/files/171008/GitLab-GitHub-Repo-Import-Deserialization-Remote-Code-Execution.html
gitlab	www.gitlab.com/gitlab-org/gitlab/-/issues/371884
gitlab	www.gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2992.json

Parameter	Position	Path	Description	CWE
default_branch	nested	api/v3/repos/\w+/\w+	GitLab GitHub repo import deserialization payload delivered via the GitHub import API response at the /api/v3/repos/{owner}/{repo} endpoint, leveraging a crafted default_branch value to trigger Redis deserialization and remote code execution.	CWE-74

17 Jun 2026 04:42Current

9.4High risk

Vulners AI Score9.4

CVSS 3.19.9

EPSS0.86194

SSVC

CWE-74

vulnerability gitlab ce ee authenticated user remote code execution import from github api endpoint nvd