Lucene search
Veracode Vulnerability DatabaseVERACODE:42433HistoryAug 06, 2023 - 8:12 p.m.
Arbitrary Code Injection
2023-08-0620:12:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
code injection
gitlab
vulnerability
authenticated attacker
arbitrary content
arbitrary requests
software
8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
56.6%
gitlab is vulnerable to Arbitrary Code Injection. The vulnerability allows an authenticated attacker to inject arbitrary content. A victim interacting with this content could lead to arbitrary requests.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 | |
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 |
Related
nessus
nessus
GitLab 14.9 < 15.1.6 / 15.2 < 15.2.4 / 15.3 < 15.3.2 (CVE-2022-2527)
2024-01-03 00:00:00
osv
osv
BIT-gitlab-2022-2527
2024-03-06 11:15:02
CVE-2022-2527
2022-10-17 16:15:21
debiancve
debiancve
CVE-2022-2527
2022-10-17 16:15:21
nvd
nvd
CVE-2022-2527
2022-10-17 16:15:21
cvelist
cvelist
CVE-2022-2527
2022-10-17 00:00:00
cve
cve
CVE-2022-2527
2022-10-17 16:15:21
prion
prion
Design/Logic Flaw
2022-10-17 16:15:00
ubuntucve
ubuntucve
CVE-2022-2527
2022-10-17 00:00:00
freebsd
freebsd
Gitlab -- multiple vulnerabilities
2022-08-30 00:00:00
8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
56.6%
Related for VERACODE:42433