by Kastro
Paper/Archive/CVE-2022-2826

CVE-2022-2826

GitLab GitLab — An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 1…

EPSS 1%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 65.0.650 × 2013.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions starting from 13.0 before 13.0.1. TODO

Affected

ProductAffectedFixed inSource
GitLab>=10.0, <12.9.8–CNA
GitLab>=12.10, <12.10.7–CNA
GitLab>=13.0, <13.0.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GitLab (CNA)2.7CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refgitlab.com/gitlab-org/gitlab/-/issues/370790refhackerone.com/reports/1646633refgitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2826.json