VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 17, 2022· Updated May 14, 2025

CVE-2022-2992

CVE-2022-2992

Description

A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • GitLab Inc./GitLabllm-fuzzy2 versions
    <15.1.6, 15.2-15.2.4, 15.3-15.3.2+ 1 more
    • (no CPE)range: <15.1.6, 15.2-15.2.4, 15.3-15.3.2
    • (no CPE)range: >=11.10, <15.1.6
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 11.10.0, < 15.1.6

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.