Unrated severityNVD Advisory· Published Jul 28, 2022· Updated Aug 3, 2024
CVE-2022-1948
CVE-2022-1948
Description
An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1. Missing validation of input used in quick actions allowed an attacker to exploit XSS by injecting HTML in contact details.
Affected products
3>=15.0 <15.0.1+ 1 more
- (no CPE)range: >=15.0 <15.0.1
- (no CPE)range: >=15.0.0, <15.0.1
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1948.jsonmitrex_refsource_CONFIRM
- gitlab.com/gitlab-org/security/gitlab/-/issues/673mitrex_refsource_MISC
- hackerone.com/reports/1578400mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.