Lucene search
PRIOn knowledge basePRION:CVE-2022-3572HistoryJan 26, 2023 - 9:15 p.m.
Cross site scripting
2023-01-2621:15:00
PRIOn knowledge base
www.prio-n.com
2
cross-site scripting
gitlab ce/ee
vulnerability
jira connect integration
reflected xss
arbitrary actions
A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions from 13.5 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. It was possible to exploit a vulnerability in setting the Jira Connect integration which could lead to a reflected XSS that allowed attackers to perform arbitrary actions on behalf of victims.
Related
ubuntucve
ubuntucve
CVE-2022-3572
2023-01-26 00:00:00
cvelist
cvelist
CVE-2022-3572
2023-01-24 00:00:00
cve
cve
CVE-2022-3572
2023-01-26 21:15:54
osv
osv
CVE-2022-3572
2023-01-26 21:15:54
BIT-gitlab-2022-3572
2024-03-06 11:14:04
debiancve
debiancve
CVE-2022-3572
2023-01-26 21:15:54
nessus
nessus
GitLab 13.5 < 15.4.6 / 15.5 < 15.5.5 / 15.6 < 15.6.1 (CVE-2022-3572)
2023-01-16 00:00:00
nvd
nvd
CVE-2022-3572
2023-01-26 21:15:54
veracode
veracode
Cross-site Scripting (XSS)
2023-07-23 18:48:28
freebsd
freebsd
Gitlab -- Multiple Vulnerabilities
2022-11-30 00:00:00