Vulnerability · Published Mar 28, 2022 · Assigned by GitLab

CVE-2022-0735

Critical 10.0

In plain English

A critical-severity security flaw in GitLab from GitLab. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 13.2% (higher than 96% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.

Severity (CVSS 3.1)10.0Critical

Exploit odds (30 days)13.2%top 3.6% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack tooling1Nuclei

Official description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. An unauthorised user was able to steal runner registration tokens through an information disclosure vulnerability using quick actions commands.

Affected products (as reported)

Vendor	Product	Versions
GitLab	GitLab	>=14.8, <14.8.2>=14.7, <14.7.4>=12.10, <14.6.5

References

https://gitlab.com/gitlab-org/gitlab/-/issues/353529 x_refsource_MISC
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0735.json x_refsource_CONFIRM