CVE-2022-0751

Description

Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets with misleading content which could trick unsuspecting users into executing arbitrary commands

References

https://hackerone.com/reports/1420660

https://gitlab.com/gitlab-org/gitlab/-/issues/349382

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0751.json

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3