NA

CVE-2022-2527

Published: 17/10/2022 Updated: 19/10/2022
CVSS v3 Base Score: 8 | Impact Score: 5.9 | Exploitability Score: 2.1
VMScore: 0

Vulnerability Summary

An issue in Incident Timelines has been discovered in GitLab CE/EE affecting all versions starting from 14.9 prior to 15.1.6, all versions starting from 15.2 prior to 15.2.4, all versions starting from 15.3 prior to 15.3.2.which allowed an authenticated malicious user to inject arbitrary content. A victim interacting with this content could lead to arbitrary requests.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gitlab gitlab