CVE-2022-2884

Severity: critical (CVSS 9.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 75.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-10-17 · updated 2026-06-17
Weakness: CWE-78

Description

A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3.1 allows an an authenticated user to achieve remote code execution via the Import from GitHub API endpoint

Affected products

GitLab: from 11.3.4 before 15.1.5; from 15.2 before 15.2.3; from 15.3 before 15.3.1 — fixed in 15.1.5, 15.2.3, 15.3.1

How to fix

Upgrade to a fixed version: GitLab 15.1.5, 15.2.3, 15.3.1. Check the vendor advisory for mitigations.

References

http://packetstormsecurity.com/files/171628/GitLab-15.3-Remote-Code-Execution.html
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2884.json
https://gitlab.com/gitlab-org/gitlab/-/issues/371098
https://hackerone.com/reports/1672388
http://packetstormsecurity.com/files/171628/GitLab-15.3-Remote-Code-Execution.html
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2884.json
https://gitlab.com/gitlab-org/gitlab/-/issues/371098
https://hackerone.com/reports/1672388

Get alerted when CVE-2022-2884 or the next vulnerability affects your stack