NetSight
IP …
high8.7Public exploit code

CVE-2022-1175

Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 allowed an attacker to exploit XSS by injecting HTML in notes.

Affected products

VendorProductAffected versions
GitlabGitlab
from 14.4.0 before 14.7.7
from 14.8.0 before 14.8.5
from 14.9.0 before 14.9.2

Weakness classification

CWE-79

References