CVE-2022-2230: XSS
A Stored Cross-Site Scripting vulnerability in the project settings page in GitLab CE/EE affecting all versions from 14.4 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows an attacker to execute arbitrary JavaScript code in GitLab on a victim's behalf.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-2230?
CVE-2022-2230 is classified as a Stored Cross-Site Scripting vulnerability that could lead to arbitrary JavaScript execution in GitLab.
How do I fix CVE-2022-2230?
To resolve CVE-2022-2230, update GitLab to version 14.10.5 or later, or version 15.0.4 or later.
What versions of GitLab are affected by CVE-2022-2230?
CVE-2022-2230 affects GitLab versions from 14.4 before 14.10.5, 15.0 before 15.0.4, and the exact version 15.1.0.
Can CVE-2022-2230 be exploited remotely?
Yes, CVE-2022-2230 can be exploited remotely by an attacker through the project settings page in GitLab.
What type of vulnerability is CVE-2022-2230?
CVE-2022-2230 is a Stored Cross-Site Scripting vulnerability that allows execution of arbitrary scripts in user sessions.