CVE-2022-0249

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

A vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a blind SSRF attack since requests to shared address space were not blocked.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-918

Affected software

Vendor	Product	Versions
GitLab	GitLab	>=14.7, <14.7.1; >=14.6, <14.6.4; >=12.0, <14.5.4

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0249.jsonVendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/29395Exploit, Issue Tracking, Vendor Advisory
https://hackerone.com/reports/579934Permissions Required, Third Party Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0249.jsonVendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/29395Exploit, Issue Tracking, Vendor Advisory
https://hackerone.com/reports/579934Permissions Required, Third Party Advisory

Timeline

Published: Mar 28, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-02506.1The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it in an attribute, lead CVE-2022-02515.4Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.10.CVE-2022-02526.1The GiveWP WordPress plugin before 2.17.3 does not escape the json parameter before outputting it back in an attribute in the Import admin d CVE-2022-02535.4livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2022-02549.8The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using t CVE-2022-02557.2The Database Backup for WordPress plugin before 2.5.1 does not properly sanitise and escape the fragment parameter before using it in a SQL CVE-2022-02565.4pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2022-02575.4pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2022-02588.8pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command CVE-2022-02605.4Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.7.CVE-2022-02617.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-02626.1Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.7.