Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-2500HistoryAug 05, 2022 - 4:15 p.m.
CVE-2022-2500
2022-08-0516:15:12
Debian Security Bug Tracker
security-tracker.debian.org
25
gitlab
cross-site scripting
stored xss
client side
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
29.7%
A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1. A stored XSS flaw in job error messages allows attackers to perform arbitrary actions on behalf of victims at client side.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | gitlab | < 15.10.8+ds1-2 | gitlab_15.10.8+ds1-2_all.deb |
Related
prion
prion
Cross site scripting
2022-08-05 16:15:00
veracode
veracode
Cross-site Scripting (XSS)
2023-08-06 20:13:10
osv
osv
BIT-gitlab-2022-2500
2024-03-06 11:15:06
CVE-2022-2500
2022-08-05 16:15:12
nessus
nessus
GitLab 0.0 < 15.0.5 / 15.1 < 15.1.4 / 15.2 < 15.2.1 (CVE-2022-2500)
2022-08-03 00:00:00
ubuntucve
ubuntucve
CVE-2022-2500
2022-08-05 00:00:00
cve
cve
CVE-2022-2500
2022-08-05 16:15:12
cvelist
cvelist
CVE-2022-2500
2022-08-05 15:12:34
nvd
nvd
CVE-2022-2500
2022-08-05 16:15:12
openvas
openvas
GitLab <= 15.0.4, 15.1.x - 15.1.3, 15.2 Multiple Vulnerabilities
2022-08-08 00:00:00
freebsd
freebsd
Gitlab -- multiple vulnerabilities
2022-07-28 00:00:00
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
29.7%
Related for DEBIANCVE:CVE-2022-2500