Lucene search
PRIOn knowledge basePRION:CVE-2022-1433HistoryMay 11, 2022 - 3:15 p.m.
Cross site scripting
2022-05-1115:15:00
PRIOn knowledge base
www.prio-n.com
7
gitlab
version 14.4
version 14.8.6
version 14.9
version 14.9.4
version 14.10
vulnerability
xss
cve-2022-1175
markdown caching
invalidation
An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. Missing invalidation of Markdown caching causes potential payloads from a previously exploitable XSS vulnerability (CVE-2022-1175) to persist and execute.
Related
nessus
nessus
GitLab 14.4 < 14.8.6 / 14.9 < 14.9.4 / 14.10 < 14.10.1 (CVE-2022-1433)
2022-05-18 00:00:00
GitLab 14.4 < 14.7.7 / 14.8 < 14.8.5 / 14.9 < 14.9.2 (CVE-2022-1175)
2022-04-18 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2023-07-23 08:13:27
Improper Neutralization
2023-07-22 22:33:05
osv
osv
CVE-2022-1433
2022-05-11 15:15:09
BIT-gitlab-2022-1433
2024-03-06 11:15:58
CVE-2022-1175
2022-04-04 20:15:10
nvd
nvd
CVE-2022-1433
2022-05-11 15:15:09
CVE-2022-1175
2022-04-04 20:15:10
cvelist
cvelist
CVE-2022-1433
2022-05-11 14:27:44
CVE-2022-1175
2022-04-04 19:46:15
cve
cve
CVE-2022-1433
2022-05-11 15:15:09
CVE-2022-1175
2022-04-04 20:15:10
ubuntucve
ubuntucve
CVE-2022-1433
2022-05-11 00:00:00
CVE-2022-1175
2022-04-04 00:00:00
debiancve
debiancve
CVE-2022-1433
2022-05-11 15:15:09
CVE-2022-1175
2022-04-04 20:15:10
openvas
openvas
GitLab 14.4 < 14.8.6, 14.9.x < 14.9.4, 14.10.x < 14.10.1 XSS Vulnerability.
2022-06-14 00:00:00
GitLab 14.4.x < 14.7.7, 14.8.x < 14.8.5, 14.9.x < 14.9.2 XSS Vulnerability
2022-04-05 00:00:00
zdt
zdt
GitLab 14.9 - Stored Cross-Site Scripting Vulnerability
2022-04-26 00:00:00
checkpoint_advisories
checkpoint_advisories
GitLab Community and Enterprise Cross-Site Scripting (CVE-2022-1175)
2022-11-07 00:00:00
prion
prion
Input validation
2022-04-04 20:15:00
packetstorm
packetstorm
Gitlab 14.9 Cross Site Scripting
2022-04-26 00:00:00
exploitdb
exploitdb
GitLab 14.9 - Stored Cross-Site Scripting (XSS)
2022-04-26 00:00:00
thn
thn
avleonov
avleonov
Gitlab OmniAuth Static Passwords and stored XSS
2022-04-04 16:42:07
freebsd
freebsd
Gitlab -- multiple vulnerabilities
2022-03-31 00:00:00