Vulnerability Details CVE-2022-0244
An issue has been discovered in GitLab CE/EE affecting all versions starting with 14.5. Arbitrary file read was possible by importing a group was due to incorrect handling of file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.8%
CVSS Severity
CVSS v3 Score 8.6
CVSS v2 Score 5.0
Products affected by CVE-2022-0244
-
cpe:2.3:a:gitlab:gitlab:14.5
-
cpe:2.3:a:gitlab:gitlab:14.5.0
-
cpe:2.3:a:gitlab:gitlab:14.5.1
-
cpe:2.3:a:gitlab:gitlab:14.5.2
-
cpe:2.3:a:gitlab:gitlab:14.5.3
-
cpe:2.3:a:gitlab:gitlab:14.6
-
cpe:2.3:a:gitlab:gitlab:14.6.0
-
cpe:2.3:a:gitlab:gitlab:14.6.1
-
cpe:2.3:a:gitlab:gitlab:14.6.2