GitLab GitHub Repo Import Deserialization RCE
Title source: metasploitExploitation Summary
EIP tracks 3 public exploits for CVE-2022-2992.
PoCs published by CsEnox, Malwareman007, William Bowling (vakzz), Heyder Andrade <https://infosec.exchange/@heyder>, RedWay Security <https://infosec.exchange/@redway>, including Metasploit module exploits/multi/http/gitlab_github_import_rce_cve_2022_2992.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2022-2992, an authenticated RCE vulnerability in GitLab via GitHub import. The exploit leverages Ruby deserialization gadgets to achieve remote code execution on vulnerable GitLab instances.
Description
A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint.
Exploits (3)
This repository contains a functional exploit for CVE-2022-2992, an authenticated RCE vulnerability in GitLab via GitHub import. The exploit leverages Ruby deserialization gadgets to achieve remote code execution on vulnerable GitLab instances.
This repository contains a functional exploit for CVE-2022-2992, an authenticated RCE vulnerability in GitLab via GitHub import. The exploit leverages Ruby deserialization gadgets to achieve remote code execution on vulnerable GitLab instances.
This Metasploit module exploits CVE-2022-2992, a deserialization vulnerability in GitLab's GitHub repository import feature. It allows authenticated users to achieve RCE by injecting a malicious Redis serialization payload into the session cache.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H