CVE-2022-1175

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-1175
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-1175.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-1175
Aliases
Downstream
Published
2022-04-04T19:46:15Z
Modified
2025-11-28T02:35:42.758521Z
Severity
  • 8.7 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 allowed an attacker to exploit XSS by injecting HTML in notes.

Database specific 
{
    "cna_assigner": "GitLab",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1175.json"
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
19c719febd74b6edf549bf6a2c0e36bf8f176d56
Fixed
6d5453caf44cbb4379bebe8a406551db5441a5a2
Database specific 
{
    "versions": [
        {
            "introduced": "14.4"
        },
        {
            "fixed": "14.7.7"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
1d7d0b0a1db4c69533330ab29c6c0d3bdb17adba
Fixed
fdf232e4acc50b3f86090b2c18253449577616dc
Database specific 
{
    "versions": [
        {
            "introduced": "14.8"
        },
        {
            "fixed": "14.8.5"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
1fdefb34741e329ede520eba6c3038eb48bfa191
Fixed
3034418fb311e288d880c55ee707d9a3eecfe07d
Database specific 
{
    "versions": [
        {
            "introduced": "14.9"
        },
        {
            "fixed": "14.9.2"
        }
    ]
}

Affected versions

v14.*

v14.8.0-ee
v14.8.1-ee
v14.8.2-ee
v14.8.3-ee
v14.8.4-ee
v14.9.0-ee
v14.9.1-ee

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-1175.json"