AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-0735

CRITICAL · CVSS 10 EPSS 13.23%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-03-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2022-0735
Severity
CRITICAL
CVSS
10
EPSS
13.23%
GitLab

Original NVD Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. An unauthorised user was able to steal runner registration tokens through an information disclosure vulnerability using quick actions commands.