Unrated severityNVD Advisory· Published Jul 1, 2022· Updated Aug 3, 2024
CVE-2022-2230
CVE-2022-2230
Description
A Stored Cross-Site Scripting vulnerability in the project settings page in GitLab CE/EE affecting all versions from 14.4 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows an attacker to execute arbitrary JavaScript code in GitLab on a victim's behalf.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3>=14.4 <14.10.5, >=15.0 <15.0.4, >=15.1 <15.1.1+ 1 more
- (no CPE)range: >=14.4 <14.10.5, >=15.0 <15.0.4, >=15.1 <15.1.1
- (no CPE)range: >=14.4, <14.10.5
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2230.jsonmitrex_refsource_CONFIRM
- gitlab.com/gitlab-org/gitlab/-/issues/364164mitrex_refsource_MISC
- hackerone.com/reports/1588732mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.