NetSight
IP …
medium6.4

CVE-2022-2428

A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6, 15.2 to 15.2.4, and 15.3 to 15.3.2 allows an attacker to iss…

Impact

A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6, 15.2 to 15.2.4, and 15.3 to 15.3.2 allows an attacker to issue arbitrary HTTP requests

Affected products

VendorProductAffected versions
GitlabGitlab
before 15.1.6
from 15.2 before 15.2.4
from 15.3 before 15.3.2

Weakness classification

CWE-79

References