medium5.7
CVE-2022-4092
An issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1.
Impact
An issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1. It was possible to create a malicious README page due to improper neutralisation of user supplied input.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | Version 15.6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4092.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/383208
- https://hackerone.com/reports/1777934
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4092.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/383208
- https://hackerone.com/reports/1777934