Lucene search
PRIOn knowledge basePRION:CVE-2022-2904HistoryNov 02, 2022 - 8:15 p.m.
Cross site scripting
2022-11-0220:15:00
PRIOn knowledge base
www.prio-n.com
4
cross-site scripting
gitlab ce/ee
stored xss
vulnerability
arbitrary actions
A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 It was possible to exploit a vulnerability in the external status checks feature which could lead to a stored XSS that allowed attackers to perform arbitrary actions on behalf of victims at client side.
Related
cve
cve
CVE-2022-2904
2022-11-02 20:15:09
veracode
veracode
Cross-site Scripting (XSS)
2023-07-22 07:53:53
debiancve
debiancve
CVE-2022-2904
2022-11-02 20:15:09
nessus
nessus
GitLab 15.2 < 15.2.5 / 15.3 < 15.3.4 / 15.4 < 15.4.1 (CVE-2022-2904)
2022-10-07 00:00:00
nvd
nvd
CVE-2022-2904
2022-11-02 20:15:09
osv
osv
CVE-2022-2904
2022-11-02 20:15:09
BIT-gitlab-2022-2904
2024-03-06 11:14:47
ubuntucve
ubuntucve
CVE-2022-2904
2022-11-02 00:00:00
cvelist
cvelist
CVE-2022-2904
2022-11-02 00:00:00
freebsd
freebsd
Gitlab -- Multiple vulnerabilities
2022-09-29 00:00:00