Lucene search
GoogleOSV:CVE-2022-1433HistoryMay 11, 2022 - 3:15 p.m.
CVE-2022-1433
2022-05-1115:15:09
Google
osv.dev
4
An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. Missing invalidation of Markdown caching causes potential payloads from a previously exploitable XSS vulnerability (CVE-2022-1175) to persist and execute.
Related
nessus
nessus
GitLab 14.4 < 14.8.6 / 14.9 < 14.9.4 / 14.10 < 14.10.1 (CVE-2022-1433)
2022-05-18 00:00:00
GitLab 14.4 < 14.7.7 / 14.8 < 14.8.5 / 14.9 < 14.9.2 (CVE-2022-1175)
2022-04-18 00:00:00
debiancve
debiancve
CVE-2022-1433
2022-05-11 15:15:09
CVE-2022-1175
2022-04-04 20:15:10
ubuntucve
ubuntucve
CVE-2022-1433
2022-05-11 00:00:00
CVE-2022-1175
2022-04-04 00:00:00
osv
osv
BIT-gitlab-2022-1433
2024-03-06 11:15:58
CVE-2022-1175
2022-04-04 20:15:10
BIT-gitlab-2022-1175
2024-03-06 11:16:18
prion
prion
Cross site scripting
2022-05-11 15:15:00
Input validation
2022-04-04 20:15:00
nvd
nvd
CVE-2022-1433
2022-05-11 15:15:09
CVE-2022-1175
2022-04-04 20:15:10
veracode
veracode
Cross-Site Scripting (XSS)
2023-07-23 08:13:27
Improper Neutralization
2023-07-22 22:33:05
cvelist
cvelist
CVE-2022-1433
2022-05-11 14:27:44
CVE-2022-1175
2022-04-04 19:46:15
cve
cve
CVE-2022-1433
2022-05-11 15:15:09
CVE-2022-1175
2022-04-04 20:15:10
openvas
openvas
GitLab 14.4 < 14.8.6, 14.9.x < 14.9.4, 14.10.x < 14.10.1 XSS Vulnerability.
2022-06-14 00:00:00
GitLab 14.4.x < 14.7.7, 14.8.x < 14.8.5, 14.9.x < 14.9.2 XSS Vulnerability
2022-04-05 00:00:00
checkpoint_advisories
checkpoint_advisories
GitLab Community and Enterprise Cross-Site Scripting (CVE-2022-1175)
2022-11-07 00:00:00
zdt
zdt
GitLab 14.9 - Stored Cross-Site Scripting Vulnerability
2022-04-26 00:00:00
packetstorm
packetstorm
Gitlab 14.9 Cross Site Scripting
2022-04-26 00:00:00
exploitdb
exploitdb
GitLab 14.9 - Stored Cross-Site Scripting (XSS)
2022-04-26 00:00:00
thn
thn
avleonov
avleonov
Gitlab OmniAuth Static Passwords and stored XSS
2022-04-04 16:42:07
freebsd
freebsd
Gitlab -- multiple vulnerabilities
2022-03-31 00:00:00