cvedb.io
CVE-2022-39206
CRITICAL · CVSS 9.9
EPSS exploitation probability: 0%
Published 2022-09-13T19:15:13.160 · Last modified 2026-06-17T04:57:54.770

Summary

Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. When using Docker-based job executors, the Docker socket (e.g. /var/run/docker.sock on Linux) is mounted into each Docker step. Users that can define and trigger CI/CD jobs on a project could use this to control the Docker daemon on the host machine. This is a known dangerous pattern, as it can be used to break out of Docker containers and, in most cases, gain root privileges on the host system. This issue allows regular (non-admin) users to potentially take over the build infrastructure of a OneDev instance. Attackers need to have an account (or be able to register one) and need permission to create a project. Since code.onedev.io has the right preconditions for this to be exploited by remote attackers, it could have

Affected products

onedev_project — onedev

Does this affect you?

Add your gear to cvedb and we'll alert you only when onedev_project ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.