CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 10.0. It affects GitLab. Its EPSS score suggests a 13.2% probability of exploitation in the next 30 days.
CVE
CVE-2022-0735
Severity
CRITICAL
CVSS
10
EPSS
13.23%
GitLab
Original NVD Description
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. An unauthorised user was able to steal runner registration tokens through an information disclosure vulnerability using quick actions commands.
Related CVEs
Other vulnerabilities affecting the same vendor(s)