Vulnerabilities > CVE-2022-0751 - Unspecified vulnerability in Gitlab
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets with misleading content which could trick unsuspecting users into executing arbitrary commands
Vulnerable Configurations
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0751.json
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0751.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/349382
- https://gitlab.com/gitlab-org/gitlab/-/issues/349382
- https://hackerone.com/reports/1420660
- https://hackerone.com/reports/1420660