CVE-2022-2428
A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6, 15.2 to 15.2.4, and 15.3 to 15.3.2 allows an attack...
Original description
The description as published by the source.
A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6, 15.2 to 15.2.4, and 15.3 to 15.3.2 allows an attacker to issue arbitrary HTTP requests
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"15.0.0"},{"fixed":"15.1.6"},{"introduced":"15.2.0"},{"fixed":"15.2.4"},{"introduced":"15.3.0"},{"fixed":"15.3.2"}]}]
References
- advisory gitlab.com
- advisory gitlab.com
- advisory hackerone.com
- web nvd.nist.gov