Vulnerability · Published Mar 28, 2022 · Assigned by GitLab

CVE-2022-0751

Medium 6.5

In plain English

A medium-severity security flaw in GitLab from GitLab. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 73% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)1.4%top 26.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets with misleading content which could trick unsuspecting users into executing arbitrary commands

Affected products (as reported)

Vendor	Product	Versions
GitLab	GitLab	>=10.0, <14.6.5>=14.7, <14.7.4>=14.8, <14.8.2

References

https://gitlab.com/gitlab-org/gitlab/-/issues/349382 x_refsource_MISC
https://hackerone.com/reports/1420660 x_refsource_MISC
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0751.json x_refsource_CONFIRM