{"id":"CVE-2022-2185","published":"2022-07-01T15:50:03Z","modified":"2024-08-03T00:32:08Z","title":"A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior…","vendor":"GitLab","product":"GitLab","tier":"core","eol":null,"affectedVersions":[{"vendor":"GitLab","product":"GitLab","versions":[">=14.0, <14.10.5",">=15.0, <15.0.4",">=15.1, <15.1.1"]}],"description":{"text":"A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 where an authenticated user authorized to import projects could import a maliciously crafted project leading to remote code execution.","provenance":"source","from":"CVE.org"},"summary":{"text":"A flaw in GitLab, the product's project import functionality, affects versions from 14.0 up to 14.10.5, from 15.0 up to 15.0.4, and from 15.1 up to 15.1.1. An attacker who is an authenticated user with permission to import projects can import a maliciously crafted project to achieve remote code execution, requiring no user interaction and only network access to the instance.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:12:19Z"},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.7665,"percentile":0.99543,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/366088","tags":["x_refsource_MISC"]},{"url":"https://hackerone.com/reports/1609965","tags":["x_refsource_MISC"]},{"url":"https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2185.json","tags":["x_refsource_CONFIRM"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2022-34469","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-34469","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":2,"skipped":0,"earliest":"2022-07-02","earliestUrl":"https://github.com/safe3s/CVE-2022-2185-poc","repos":[{"name":"ESUAdmin/CVE-2022-2185","url":"https://github.com/ESUAdmin/CVE-2022-2185","stars":78,"created":"2022-07-29"},{"name":"safe3s/CVE-2022-2185-poc","url":"https://github.com/safe3s/CVE-2022-2185-poc","stars":13,"created":"2022-07-02"}]},"nuclei":[{"id":"CVE-2022-2185","name":"GitLab CE/EE - Remote Code Execution","severity":"high","path":"http/cves/2022/CVE-2022-2185.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2185.yaml"}],"first":{"date":"2022-07-02","source":"PoC-in-GitHub","url":"https://github.com/safe3s/CVE-2022-2185-poc"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2022-07-01","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2022-2185","provenance":"source"},{"date":"2022-07-02","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/safe3s/CVE-2022-2185-poc","provenance":"source"}],"speed":{"daysToPublicExploit":1,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":31.8,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.91,"detail":"percentile 0.9954"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"2 PoC-in-GitHub repos; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.93,"detail":"base score 9.9"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}