Exploitation Summary
EIP tracks 2 public exploits for CVE-2022-2185. PoCs published by ESUAdmin, safe3s. A Nuclei detection template is also available.
AI-analyzed exploit summary This PoC exploits CVE-2022-2185, an authenticated RCE vulnerability in GitLab's project import functionality. It uses a man-in-the-middle proxy to intercept and modify API requests, injecting a command into the project description field during import.
Description
A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 where an authenticated user authorized to import projects could import a maliciously crafted project leading to remote code execution.
Exploits (2)
This PoC exploits CVE-2022-2185, an authenticated RCE vulnerability in GitLab's project import functionality. It uses a man-in-the-middle proxy to intercept and modify API requests, injecting a command into the project description field during import.
The repository claims to be a PoC for CVE-2022-2185 but only contains a README with a link and an empty Python file. No functional exploit code is present.
Nuclei Templates (1)
http.title:"GitLab" || cpe:"cpe:2.3:a:gitlab:gitlab" || http.title:"gitlab"
title="gitlab"
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H