CRITICAL

CVE-2022-2826

Gitlab GitLab 2022-10-28 CVSS v3.1

CVSS

9.8

Description

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions starting from 13.0 before 13.0.1. TODO

Weakness (CWE)

CWE-79 Cross-site Scripting (XSS)

EPSS Score

0.89%

Probability of exploitation in next 30 days

57.7th percentile

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2826.json Third Party Advisory https://gitlab.com/gitlab-org/gitlab/-/issues/370790 Broken Link, Third Party Advisory https://hackerone.com/reports/1646633 Permissions Required, Third Party Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE