CVE-2022-1948

🗓️ 28 Jul 2022 14:46:01Reported by GitLabType

An issue in GitLab 15.0 allows XSS injection via quick actions input validatio

Reporter	Title	Published	Views	Family All 19
ATTACKERKB	CVE-2022-1948	28 Jul 202215:15	–	attackerkb
Circl	CVE-2022-1948	6 Jun 202214:46	–	circl
CNNVD	GitLab Enterprise Edition和GitLab Community Edition 跨站脚本漏洞	2 Jun 202200:00	–	cnnvd
CVE	CVE-2022-1948	28 Jul 202214:46	–	cve
Debian CVE	CVE-2022-1948	28 Jul 202214:46	–	debiancve
EUVD	EUVD-2022-25216	3 Oct 202520:07	–	euvd
FreeBSD	Gitlab -- multiple vulnerabilities	1 Jun 202200:00	–	freebsd
Tenable Nessus	FreeBSD : Gitlab -- multiple vulnerabilities (f414d69f-e43d-11ec-9ea4-001b217b3468)	4 Jun 202200:00	–	nessus
Tenable Nessus	GitLab 15.0.0 < 15.0.1 (CVE-2022-1948)	28 Jun 202200:00	–	nessus
Hacker One	GitLab: New /add_contacts /remove_contacts quick commands susseptible to XSS from Customer Contact firstname/lastname fields	22 May 202219:55	–	hackerone

[
  {
    "product": "GitLab",
    "vendor": "GitLab",
    "versions": [
      {
        "status": "affected",
        "version": ">=15.0.0, <15.0.1"
      }
    ]
  }
]

Source	Link
hackerone	www.hackerone.com/reports/1578400
gitlab	www.gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1948.json
gitlab	www.gitlab.com/gitlab-org/security/gitlab/-/issues/673

28 Jul 2022 14:46Current

8.2High risk

Vulners AI Score8.2

CVSS 3.18.7

EPSS0.0134