.. / CVE-2022-0735

• Info Disclosure
• Nuclei
• Web

Exploit for GitLab CE/EE - Information Disclosure (CVE-2022-0735)

Description:

GitLab CE/EE is susceptible to information disclosure. An attacker can access runner registration tokens using quick actions commands, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized operations. Affected versions are from 12.10 before 14.6.5, from 14.7 before 14.7.4, and from 14.8 before 14.8.2.

Nuclei Template

View the template here CVE-2022-0735.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-0735.yaml

References: