CVE-2022-1948

An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1

High · published July 28, 2022

CVSS v3.1
8.7
EPSS
1%
Percentile
64.7
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1. Missing validation of input used in quick actions allowed an attacker to exploit XSS by injecting HTML in contact details.

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01077 · 64.7th percentile
Published
2022-07-28T14:46Z
EPSS history
Timeline
  • 28 JUL 14:46Z
    An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1
    cvelistv5