CVE-2022-0741: Input Validation
Improper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed an attacker to steal environment variables via specially crafted email addresses.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-0741?
CVE-2022-0741 is considered a high-severity vulnerability due to its potential to allow attackers to steal sensitive environment variables.
How do I fix CVE-2022-0741?
To address CVE-2022-0741, upgrade GitLab to version 14.6.6 or later for versions 10.0.0 to 14.6.5, or upgrade to version 14.7.5 or later for 14.7.0 to 14.7.4.
What versions of GitLab are affected by CVE-2022-0741?
CVE-2022-0741 affects all versions of GitLab CE/EE from 10.0.0 up to and including 14.7.4.
How can an attacker exploit CVE-2022-0741?
An attacker can exploit CVE-2022-0741 by sending specially crafted email addresses that manipulate input validation to access environment variables.
Is CVE-2022-0741 specific to certain deployments of GitLab?
No, CVE-2022-0741 is a vulnerability present in all deployments of GitLab CE/EE using sendmail to send emails.