Lucene search

K
osvGoogleOSV:CVE-2022-0741
HistoryApr 01, 2022 - 11:15 p.m.

CVE-2022-0741

2022-04-0123:15:11
Google
osv.dev
9
input validation
gitlab ce/ee
email addresses
environment variables
security vulnerability

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

45.2%

Improper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed an attacker to steal environment variables via specially crafted email addresses.

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

45.2%