Lucene search
PRIOn knowledge basePRION:CVE-2022-2882HistoryOct 28, 2022 - 3:15 p.m.
Code injection
2022-10-2815:15:00
PRIOn knowledge base
www.prio-n.com
7
gitlab
ce/ee
code injection
security vulnerability
version 12.6
version 15.4.1
github integration
access token exfiltration
nvd
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. A malicious maintainer could exfiltrate a GitHub integration’s access token by modifying the integration URL such that authenticated requests are sent to an attacker controlled server.
Related
nvd
nvd
CVE-2022-2882
2022-10-28 15:15:15
cvelist
cvelist
CVE-2022-2882
2022-10-28 00:00:00
ubuntucve
ubuntucve
CVE-2022-2882
2022-10-28 00:00:00
debiancve
debiancve
CVE-2022-2882
2022-10-28 15:15:15
cve
cve
CVE-2022-2882
2022-10-28 15:15:15
osv
osv
BIT-gitlab-2022-2882
2024-03-06 11:14:49
CVE-2022-2882
2022-10-28 15:15:15
veracode
veracode
Authorization Bypass
2023-07-22 05:00:09
nessus
nessus
GitLab 12.6 < 15.2.5 / 15.3 < 15.3.4 / 15.4 < 15.4.1 (CVE-2022-2882)
2022-10-07 00:00:00
freebsd
freebsd
Gitlab -- Multiple vulnerabilities
2022-09-29 00:00:00