CVE-2022-4092: XSS
Published Jan 24, 2023
·Updated
An issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1. It was possible to create a malicious README page due to improper neutralisation of user supplied input.
Affected Software
2 affected components
GitLab GitLab=15.6.0
GitLab GitLab=15.6.0
Event History
Jan 24, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-4092?
CVE-2022-4092 has been classified as a medium severity vulnerability due to the potential for user-generated malicious content.
2
How do I fix CVE-2022-4092?
To fix CVE-2022-4092, upgrade your GitLab installation to version 15.6.1 or later.
3
What versions are affected by CVE-2022-4092?
CVE-2022-4092 affects GitLab versions starting from 15.6 before 15.6.1.
4
What type of vulnerability is CVE-2022-4092?
CVE-2022-4092 is an input validation vulnerability that allows for the creation of a malicious README page.
5
Is there a known exploit for CVE-2022-4092?
There are reports indicating that CVE-2022-4092 could be exploited to execute unintended actions through crafted README content.