What’s Vulnerable › Vulnerabilities

CVE-2022-2992

• Severity: critical (CVSS 9.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 86.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-10-17 · updated 2026-06-17
• Weakness: CWE-74

Description

A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint.

Affected products

• GitLab: from 11.10 before 15.1.6; from 15.2 before 15.2.4; from 15.3 before 15.3.2 — fixed in 15.1.6, 15.2.4, 15.3.2

How to fix

Upgrade to a fixed version: GitLab 15.1.6, 15.2.4, 15.3.2. Check the vendor advisory for mitigations.

References

• http://packetstormsecurity.com/files/171008/GitLab-GitHub-Repo-Import-Deserialization-Remote-Code-Execution.html
• https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2992.json
• https://gitlab.com/gitlab-org/gitlab/-/issues/371884
• https://hackerone.com/reports/1679624
• http://packetstormsecurity.com/files/171008/GitLab-GitHub-Repo-Import-Deserialization-Remote-Code-Execution.html
• https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2992.json
• https://gitlab.com/gitlab-org/gitlab/-/issues/371884
• https://hackerone.com/reports/1679624

Get alerted when CVE-2022-2992 or the next vulnerability affects your stack