HIGH

CVE-2022-2428

Gitlab GitLab 2022-10-17 CVSS v3.1

CVSS

7.3

Description

A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6, 15.2 to 15.2.4, and 15.3 to 15.3.2 allows an attacker to issue arbitrary HTTP requests

Summary dbcve.org

This is a Server-Side Request Forgery (SSRF) vulnerability in GitLab's Jupyter Notebook viewer. An attacker can embed a crafted tag within a notebook viewed through GitLab, causing the GitLab server to issue arbitrary HTTP requests to internal or external resources. This could allow enumeration of internal services, access to metadata endpoints, or pivoting to internal infrastructure.

Mitigation

Upgrade GitLab to version 15.1.6 or later, 15.2.5 or later, or 15.3.3 or later. If immediate upgrade is not possible, consider restricting access to the Jupyter Notebook viewer feature or implementing WAF rules to detect SSRF patterns.

Weakness (CWE)

CWE-79 Cross-site Scripting (XSS)

EPSS Score

0.82%

Probability of exploitation in next 30 days

55.7th percentile

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2428.json Third Party Advisory https://gitlab.com/gitlab-org/gitlab/-/issues/362272 Third Party Advisory https://hackerone.com/reports/1563379 Permissions Required, Third Party Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE