|CVE-2022-2992| Authenticated RCE in Gitlab via GitHub impor | Freedom F0x

|CVE-2022-2992|

Authenticated RCE in Gitlab via GitHub import.

A vulnerability in GitLab CE/EE affecting all versions from 11.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint.

hackerone credits