Medium severity5.7NVD Advisory· Published Jan 26, 2023· Updated Jun 17, 2026
CVE-2022-4092
CVE-2022-4092
Description
An issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1. It was possible to create a malicious README page due to improper neutralisation of user supplied input.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:gitlab:gitlab:15.6.0:*:*:*:community:*:*:*+ 3 more
- cpe:2.3:a:gitlab:gitlab:15.6.0:*:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:15.6.0:*:*:*:enterprise:*:*:*
- (no CPE)range: 15.6 <= v < 15.6.1
- (no CPE)range: >=15.6, <15.6.1
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/gitlab/-/issues/383208nvdExploitIssue TrackingVendor Advisory
- gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4092.jsonnvdVendor Advisory
- hackerone.com/reports/1777934nvdPermissions RequiredThird Party Advisory
News mentions
0No linked articles in our index yet.