NetSight
IP …
high7.3

CVE-2022-2904

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.5, all versions starting from 15.3 befor…

Impact

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 It was possible to exploit a vulnerability in the external status checks feature which could lead to a stored XSS that allowed attackers to perform arbitrary actions on behalf of victims at client side.

Affected products

VendorProductAffected versions
GitlabGitlab
from 15.2 before 15.2.5
from 15.2 through 15.2.5
from 15.3 before 15.3.4
from 15.3 through 15.3.4
Version 15.4

Weakness classification

CWE-79

References