Vulnerability Database

301,409

Total vulnerabilities in the database

CVE-2022-2992

A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint.

  • Published: Oct 17, 2022
  • Updated: Nov 16, 2025
  • CVE: CVE-2022-2992
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.9
  • AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
gitlab / gitlab 15.3 15.3.2
gitlab / gitlab 15.2 15.2.4
gitlab / gitlab 11.10 15.1.6