CVE-2022-1948: XSS
Published Jul 28, 2022
·Updated
An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1. Missing validation of input used in quick actions allowed an attacker to exploit XSS by injecting HTML in contact details.
Affected Software
2 affected components
GitLab GitLab=15.0.0
GitLab GitLab=15.0.0
Event History
Jul 28, 2022
CVE Published
via MITRE·02:46 PM
Data Sourced
via MITRE·02:46 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-1948?
CVE-2022-1948 has been classified with a high severity rating due to its potential for XSS attacks.
2
How do I fix CVE-2022-1948?
To mitigate CVE-2022-1948, you should upgrade to GitLab version 15.0.1 or later.
3
What systems are affected by CVE-2022-1948?
CVE-2022-1948 affects all GitLab versions starting from 15.0 up to but not including 15.0.1.
4
What type of vulnerability is CVE-2022-1948?
CVE-2022-1948 is a cross-site scripting (XSS) vulnerability related to input validation in quick actions.
5
Can CVE-2022-1948 be exploited remotely?
Yes, CVE-2022-1948 can be exploited remotely by an attacker through injecting HTML into contact details.