CVE-2022-2185 PoC — GitLab 操作系统命令注入漏洞

Source

https://github.com/safe3s/CVE-2022-2185-poc

Associated Vulnerability

Title:GitLab 操作系统命令注入漏洞 (CVE-2022-2185)
Description:GitLab是美国GitLab公司的一个开源的端到端软件开发平台，具有内置的版本控制、问题跟踪、代码审查、CI/CD（持续集成和持续交付）等功能。 GitLab 存在操作系统命令注入漏洞，该漏洞源于未经授权的用户可能使用以下命令在服务器上执行任意代码项目导入功能。以下产品版本受到影响：14.10.5 之前的 14.0、15.0.4 之前的 15.0 和 15.1.1 之前的 15.1 开始的所有版本。

Description

CVE-2022-2185 poc

Readme

# CVE-2022-2185-poc
CVE-2022-2185 poc


https://www.xust.edu.cn/cve/index.jsp

File Snapshot


 [4.0K]  /data/pocs/5f2fbc405c8094718a25b783a6e209909742a324
├── [  49]  poc.py
└── [  85]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!