CVE-2022-2884

CRITICAL ⚠ Exploit

A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3.1 allows an an authenticated user to achieve remote code execution via the I...

Affects 1 product across 1 vendor.

CVSS 3.19.9
EPSS75.7%
Percentile100th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, can impact systems beyond the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-78: OS Command Injection

Attacker injects OS commands through application inputs passed to system() or equivalent calls, leading to arbitrary command execution.

Related Attack Patterns (CAPEC)
CAPEC-43 Exploiting Multiple Input Interpretation Layers
via CWE-78
CAPEC-108 Command Line Execution through SQL Injection
via CWE-78
CAPEC-6 Argument Injection
via CWE-78
CAPEC-15 Command Delimiters
via CWE-78
CAPEC-88 OS Command Injection
via CWE-78

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A critical vulnerability in GitLab CE/EE allows authenticated users to execute arbitrary code through the Import from GitHub API endpoint.

BSID: BS-2022-GLOBAL-256321-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2022-2884?
A critical vulnerability in GitLab CE/EE allows authenticated users to execute arbitrary code through the Import from GitHub API endpoint.
What is the CVSS score for CVE-2022-2884?
CVE-2022-2884 has CVSS 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS: 75.7%.
Is CVE-2022-2884 actively exploited?
Public exploit available for CVE-2022-2884. Exploitation risk elevated.
How do I remediate CVE-2022-2884?
Priority: IMMEDIATE. Advisory: https://gitlab.com/gitlab-org/gitlab/-/issues/371098
What systems are affected by CVE-2022-2884?
CVE-2022-2884 affects Gitlab Gitlab.
Vulnerability Details
CVE IDCVE-2022-2884
BSIDBS-2022-GLOBAL-256321-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Published2022-10-17
Last Modified2026-06-17
ICS Relevance15%
Weakness (CWE)
OS Command Injection
Domains
CLOUD
SourceNVD
Official Description

A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3.1 allows an an authenticated user to achieve remote code execution via the Import from GitHub API endpoint

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker who is authenticated can exploit this vulnerability by manipulating the Import from GitHub API endpoint to execute arbitrary code on the server.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductAffected Versions
Gitlab Gitlab ≥ 11.3.4, < 15.1.5 ≥ 15.2, < 15.2.3 ≥ 15.3, < 15.3.1
Remediation
View Vendor Advisory →

Remediation Priority: IMMEDIATE

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 1471 Days
CISA known-exploitedNot in KEV catalog
Public Exploit⚠ Available — Reference
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
Related CVEs affecting Gitlab
CVE-2021-22205 10.0 An issue has been discovered in GitLab CE/EE affecting all versions starting ... CVE-2019-9174 10.0 An issue was discovered in GitLab Community and Enterprise Edition before 11.... CVE-2020-13300 10.0 GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authoriz... CVE-2026-85706 10.0 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18... CVE-2026-97229 10.0 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19...
View all Gitlab CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.9 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →