medium6.5
CVE-2022-0751
Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets with misleading content…
Impact
Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets with misleading content which could trick unsuspecting users into executing arbitrary commands
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | from 10.0 before 14.6.5 from 14.7 before 14.7.4 from 14.8 before 14.8.2 |
References
- NVD record
- CVE.org record
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0751.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/349382
- https://hackerone.com/reports/1420660
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0751.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/349382
- https://hackerone.com/reports/1420660