CVE-2022-1175
Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions startin...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 allowed an attacker to exploit XSS by injecting HTML in notes.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"14.4.0"},{"fixed":"14.7.7"},{"introduced":"14.8.0"},{"fixed":"14.8.5"},{"introduced":"14.9.0"},{"fixed":"14.9.2"}]}]
Références
- advisory packetstormsecurity.com
- advisory gitlab.com
- advisory hackerone.com
- web gitlab.com
- web nvd.nist.gov