{"metadata": {"vulnerability": "CVE-2022-2992", "count": 42, "kinds": {"milestone": 7, "sighting": 19, "kev": 0, "other": 16}}, "data": [{"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-2992", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-08-31T00:00:00Z", "date_only": false, "value": "2022-08-31T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-782", "record": "CERTFR-2022-AVI-782", "field": "last_revision_date"}, {"timestamp": "2022-08-31T00:00:00Z", "date_only": false, "value": "2022-08-31T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-782", "record": "CERTFR-2022-AVI-782", "field": "initial_release_date"}, {"timestamp": "2022-08-31T00:00:00Z", "date_only": false, "value": "2022-08-31T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-782", "record": "CERTFR-2022-AVI-782", "field": "revisions.0.revision_date"}, {"timestamp": "2022-10-09T14:07:43Z", "date_only": false, "value": "2022-10-09T14:07:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/25958", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "03e688ef-7759-4918-aa57-dc9a204d77c4", "content": "https://github.com/CsEnox/CVE-2022-2992", "url": "https://t.me/intelexch/25958"}, {"timestamp": "2022-10-10T07:03:55Z", "date_only": false, "value": "2022-10-10T07:03:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1026", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "c713942f-6d67-4987-8a15-dd10f7282d4e", "content": "CVE-2022-2992\nAuthenticated Remote Command Execution in Gitlab via GitHub import.\n*\nA vulnerability in GitLab CE/EE affecting all versions from 11.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint.\nExploit and Readme\n\n#exploit", "url": "https://t.me/proxy_bar/1026"}, {"timestamp": "2022-10-11T02:32:29Z", "date_only": false, "value": "2022-10-11T02:32:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/6946", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "6268bb61-9610-4e11-a865-8313c1964f90", "content": "#exploit\nCVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992", "url": "https://t.me/CyberSecurityTechnologies/6946"}, {"timestamp": "2022-10-17T00:00:00Z", "date_only": false, "value": "2022-10-17T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-2992", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-10-17T16:15:00Z", "date_only": false, "value": "2022-10-17T16:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M7F3-552R-PF23", "record": "GHSA-M7F3-552R-PF23", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-10-17T16:15:00Z", "date_only": false, "value": "2022-10-17T16:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-2992", "record": "UBUNTU-CVE-2022-2992", "field": "published"}, {"timestamp": "2022-10-17T16:15:00Z", "date_only": false, "value": "2022-10-17T16:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-2992", "record": "GSD-2022-2992", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-10-17T16:15:21.640Z", "date_only": false, "value": "2022-10-17T16:15:21.640", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2992", "record": "FKIE_CVE-2022-2992", "field": "published"}, {"timestamp": "2022-10-17T19:00:27Z", "date_only": false, "value": "2022-10-17T19:00:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M7F3-552R-PF23", "record": "GHSA-M7F3-552R-PF23", "field": "published"}, {"timestamp": "2022-10-19T19:00:21Z", "date_only": false, "value": "2022-10-19T19:00:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M7F3-552R-PF23", "record": "GHSA-M7F3-552R-PF23", "field": "modified"}, {"timestamp": "2022-10-22T06:36:59Z", "date_only": false, "value": "2022-10-22T06:36:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/h2-8cMxm2rjhROEHHz1DsUtKgyqNrT29ZVXlVrWu3InrfQk", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "525195d7-7fb9-4e9f-8579-0664e331a9e3"}, {"timestamp": "2022-11-13T03:15:00Z", "date_only": false, "value": "2022-11-13T03:15:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/svK4kHNDHZ_Def8Oth7PJq9-9JuxBN1fVJ912OIPd5FK-fA", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "e01f109a-1603-445c-8335-706d03431667"}, {"timestamp": "2023-01-02T12:53:10Z", "date_only": false, "value": "2023-01-02T12:53:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Qahgv_yYIyA3kzVr1z_AWBylMiyjPwrWyfefrMSht9YAvmg", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "085fe031-1cf9-477a-97f6-466e3442f934"}, {"timestamp": "2023-02-14T22:23:51Z", "date_only": false, "value": "2023-02-14T22:23:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gitlab_github_import_rce_cve_2022_2992.rb", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "88d661db-1785-4fa4-9a86-6d82b927a345", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gitlab_github_import_rce_cve_2022_2992.rb"}, {"timestamp": "2023-02-15T00:00:00Z", "date_only": false, "value": "2023-02-15T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitLab", "record": "CVE-2022-2992", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-02-15T20:15:00Z", "date_only": false, "value": "2023-02-15T20:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-2992", "record": "GSD-2022-2992", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:19:19.905Z", "date_only": false, "value": "2023-12-13T01:19:19.905008Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-2992", "record": "GSD-2022-2992", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-06T11:14:42.307Z", "date_only": false, "value": "2024-03-06T11:14:42.307Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2022-2992", "record": "BIT-GITLAB-2022-2992", "field": "published"}, {"timestamp": "2024-08-03T00:53:00.661Z", "date_only": false, "value": "2024-08-03T00:53:00.661Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-2992", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "9fb0246d-5f61-4d29-9932-0b2aee4258f7"}, {"timestamp": "2025-02-23T04:10:45Z", "date_only": false, "value": "2025-02-23T04:10:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "7832d58b-c7bf-44da-a90b-92b92ded59d0"}, {"timestamp": "2025-05-14T14:27:07.346Z", "date_only": false, "value": "2025-05-14T14:27:07.346076Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-2992", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-14T14:27:07.346Z", "date_only": false, "value": "2025-05-14T14:27:07.346076Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2992", "record": "FKIE_CVE-2022-2992", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-14T14:27:30.020Z", "date_only": false, "value": "2025-05-14T14:27:30.020Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-2992", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-14T14:27:30.020Z", "date_only": false, "value": "2025-05-14T14:27:30.020Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-2992", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-14T14:31:55Z", "date_only": false, "value": "2025-05-14T14:31:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16310", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "7ad6f9f5-7c3d-469c-8ccb-91d0f9b0821f", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-2992\n\ud83d\udd25 CVSS Score: 9.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint.\n\ud83d\udccf Published: 2022-10-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-14T14:27:30.020Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/371884\n2. https://hackerone.com/reports/1679624\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2992.json\n4. http://packetstormsecurity.com/files/171008/GitLab-GitHub-Repo-Import-Deserialization-Remote-Code-Execution.html", "url": "https://t.me/DarkWebInformer_CVEAlerts/16310"}, {"timestamp": "2025-10-23T21:13:00Z", "date_only": false, "value": "2025-10-23T21:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "fcd5c538-4b7b-4118-b05e-f7a4bdc76dc8"}, {"timestamp": "2025-10-24T04:53:05Z", "date_only": false, "value": "2025-10-24T04:53:05Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-2992", "record": "UBUNTU-CVE-2022-2992", "field": "modified"}, {"timestamp": "2026-06-17T04:42:56.830Z", "date_only": false, "value": "2026-06-17T04:42:56.830", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2992", "record": "FKIE_CVE-2022-2992", "field": "lastModified"}, {"timestamp": "2026-07-29T12:00:58.814Z", "date_only": false, "value": "2026-07-29T12:00:58.814024Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/3263", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "fde580b4-4c6a-4551-9892-52cdae10a955", "url": "https://t.me/CVEhub/3263"}, {"timestamp": "2026-07-30T00:01:37.894Z", "date_only": false, "value": "2026-07-30T00:01:37.894369Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/3263", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "b225c009-b77a-4007-9d26-b9c489e1de04", "url": "https://t.me/CVEhub/3263"}, {"timestamp": "2026-08-01T02:00:04.693Z", "date_only": false, "value": "2026-08-01T02:00:04.693515Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/3263", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "3e4e6538-ef10-4981-9193-1e2e28a73320", "url": "https://t.me/CVEhub/3263"}, {"timestamp": "2026-08-02T00:01:20.447Z", "date_only": false, "value": "2026-08-02T00:01:20.447730Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/3263", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "030bc687-3a35-43ed-a262-8f22cc5c4ec7", "url": "https://t.me/CVEhub/3263"}, {"timestamp": "2026-08-09T04:23:36.657Z", "date_only": false, "value": "2026-08-09T04:23:36.657396Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/onelab1337/2381", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "1628b11b-7c5e-400d-9898-cf129246084c", "url": "https://t.me/onelab1337/2381"}, {"timestamp": "2026-08-10T00:00:29.467Z", "date_only": false, "value": "2026-08-10T00:00:29.467130Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/onelab1337/2381", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "9d21f872-b012-46c7-95fc-5dd92c89b0a8", "url": "https://t.me/onelab1337/2381"}, {"timestamp": "2026-09-01T17:00:25.803Z", "date_only": false, "value": "2026-09-01T17:00:25.803780Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6215", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "617fb41d-8375-4870-934d-274f7772d29e", "url": "https://t.me/cissp/6215"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2022-2992", "record": "BIT-GITLAB-2022-2992", "field": "modified"}, {"timestamp": "2026-09-10T06:00:05.472Z", "date_only": false, "value": "2026-09-10T06:00:05.472388Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/6215", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "19a494a6-76d5-4dc9-b1c6-2c21bc7459f9", "url": "https://t.me/cissp/6215"}]}