Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-3265
HistoryNov 09, 2022 - 11:15 p.m.

Cross site scripting

2022-11-0923:15:00
PRIOn knowledge base
www.prio-n.com
8
cross-site scripting
gitlab
ce
ee
vulnerability
exploit
labels
stored xss
arbitrary actions
client side

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.6%

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. It was possible to exploit a vulnerability in setting the labels colour feature which could lead to a stored XSS that allowed attackers to perform arbitrary actions on behalf of victims at client side.

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.6%