Lucene search

CVE-2022-4007

🗓️ 08 Mar 2023 23:10:15Reported by [email protected]Type

A cross-site scripting vulnerability found in GitLab CE/EE versions 15.3 to 15.7.8, 15.8 to 15.8.4, and 15.9 to 15.9.

Reporter	Title	Published	Views	Family All 13
Prion	Cross site scripting	8 Mar 202323:15	–	prion
CVE	CVE-2022-4007	8 Mar 202323:15	–	cve
Vulnrichment	CVE-2022-4007	8 Mar 202300:00	–	vulnrichment
UbuntuCve	CVE-2022-4007	8 Mar 202300:00	–	ubuntucve
Cvelist	CVE-2022-4007	8 Mar 202300:00	–	cvelist
Debian CVE	CVE-2022-4007	8 Mar 202323:15	–	debiancve
OSV	CVE-2022-4007	8 Mar 202323:15	–	osv
OSV	BIT-gitlab-2022-4007	6 Mar 202411:13	–	osv
Veracode	Cross-site Scripting (XSS)	7 Aug 202302:25	–	veracode
Tenable Nessus	GitLab 15.3 < 15.7.8 / 15.8 < 15.8.4 / 15.9 < 15.9.2 (CVE-2022-4007)	3 Mar 202300:00	–	nessus

Nvd

Node

gitlab gitlabRange15.3–15.7.8community

gitlab gitlabRange15.3–15.7.8enterprise

gitlab gitlabRange15.8.0–15.8.4community

gitlab gitlabRange15.8.0–15.8.4enterprise

gitlab gitlabRange15.9.0–15.9.2community

gitlab gitlabRange15.9.0–15.9.2enterprise

Source	Link
hackerone	www.hackerone.com/reports/1767745
gitlab	www.gitlab.com/gitlab-org/gitlab/-/issues/382789
gitlab	www.gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4007.json

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Mar 2023 23:15Current

5.7Medium risk

Vulners AI Score5.7

CVSS36.1

EPSS0.00089

CWE-79