CVE-2022-1175: XSS
Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 allowed an attacker to exploit XSS by injecting HTML in notes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1175?
The severity of CVE-2022-1175 is considered high due to its potential to allow attackers to execute arbitrary JavaScript in victim browsers.
How do I fix CVE-2022-1175?
To fix CVE-2022-1175, it is recommended to upgrade GitLab to version 14.7.7, 14.8.5, or 14.9.2 or later.
What versions of GitLab are affected by CVE-2022-1175?
CVE-2022-1175 affects GitLab CE/EE versions 14.4 through 14.7.6, 14.8.0 through 14.8.4, and 14.9.0 through 14.9.1.
Can CVE-2022-1175 be exploited remotely?
Yes, CVE-2022-1175 can be exploited remotely by attackers through injected HTML content.
What types of attacks are possible with CVE-2022-1175?
CVE-2022-1175 enables attackers to perform Cross-Site Scripting (XSS) attacks, potentially leading to data theft or unauthorized actions.