CoreCVE
Back

MEDIUM

A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8 prior to 15.8.4, and version 15.9 prior to 15.9.2 A cross-site scripting vulnerability was found in the title field of work items that allowed attackers to perform arbitrary actions on behalf of victims at client side

Published Mar 8, 2023

Description

A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8 prior to 15.8.4, and version 15.9 prior to 15.9.2 A cross-site scripting vulnerability was found in the title field of work items that allowed attackers to perform arbitrary actions on behalf of victims at client side.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner GitLab
Published Mar 8, 2023
Updated Mar 12, 2025
Reserved Nov 15, 2022
Link CVE-2022-4007

CISA Vulnrichment

Updated Mar 5, 2025

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2022-4007

Red Hat

No data

ENISA EUVD

Assigner GitLab
Published Mar 8, 2023
Updated Mar 12, 2025
Link EUVD-2022-51388

GitHub

No data