medium5.8
CVE-2022-0741
Improper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed an attacker to steal environment variables via specially crafte…
Impact
Improper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed an attacker to steal environment variables via specially crafted email addresses.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | from 10.0.0 before 14.6.5 from 14.7.0 before 14.7.4 from 14.8.0 before 14.8.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0741.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/337601
- https://hackerone.com/reports/1286317
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0741.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/337601
- https://hackerone.com/reports/1286317