March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – CVE-2022-2587 – Google Chrome OS Audio Server Exploit in the Wild
August 24, 2022
Rewterz Threat Alert – LokiBot Malware – Active IOCs
August 24, 2022
Rewterz Threat Advisory – CVE-2022-2587 – Google Chrome OS Audio Server Exploit in the Wild
August 24, 2022
Rewterz Threat Alert – LokiBot Malware – Active IOCs
August 24, 2022
Severity
High
Analysis Summary
CVE-2022-2884
A vulnerability in GitLab CE/EE affecting all versions starting from 11.3.4 before 15.1.5, all versions starting from 15.2 before 15.2.3, all versions starting from 15.3 before 15.3.1 allows an an authenticated user to achieve remote code execution via the Import from GitHub API endpoint.
Impact
- Remote Code Execution
Indicators Of Compromise
CVE
- CVE-2022-2884
Affected Vendors
GitLab
Affected Products
- Gitlab CE/EE from 11.3.4 to before 15.1.5
- Gitlab CE/EE 15.2 prior to 15.2.3
- Gitlab CE/EE 15.3 prior to 15.3.1
Remediation
Refer to GitLab Security Advisory for patch, upgrade or suggested workaround information.