Логотип exploitDog
bind:CVE-2022-3513
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-3513

Количество 4

Количество 4

ubuntu логотип

CVE-2022-3513

почти 3 года назад

An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. A specially crafted payload could lead to a reflected XSS on the client side which allows attackers to perform arbitrary actions on behalf of victims on self-hosted instances running without strict CSP.

CVSS3: 6.1
EPSS: Средний
nvd логотип

CVE-2022-3513

почти 3 года назад

An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. A specially crafted payload could lead to a reflected XSS on the client side which allows attackers to perform arbitrary actions on behalf of victims on self-hosted instances running without strict CSP.

CVSS3: 6.1
EPSS: Средний
debian логотип

CVE-2022-3513

почти 3 года назад

An issue has been discovered in GitLab affecting all versions starting ...

CVSS3: 6.1
EPSS: Средний
github логотип

GHSA-8w2x-795m-pv4v

почти 3 года назад

An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. A specially crafted payload could lead to a reflected XSS on the client side which allows attackers to perform arbitrary actions on behalf of victims on self-hosted instances running without strict CSP.

CVSS3: 6.1
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2022-3513

An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. A specially crafted payload could lead to a reflected XSS on the client side which allows attackers to perform arbitrary actions on behalf of victims on self-hosted instances running without strict CSP.

CVSS3: 6.1
25%
Средний
почти 3 года назад
nvd логотип
CVE-2022-3513

An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. A specially crafted payload could lead to a reflected XSS on the client side which allows attackers to perform arbitrary actions on behalf of victims on self-hosted instances running without strict CSP.

CVSS3: 6.1
25%
Средний
почти 3 года назад
debian логотип
CVE-2022-3513

An issue has been discovered in GitLab affecting all versions starting ...

CVSS3: 6.1
25%
Средний
почти 3 года назад
github логотип
GHSA-8w2x-795m-pv4v

An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. A specially crafted payload could lead to a reflected XSS on the client side which allows attackers to perform arbitrary actions on behalf of victims on self-hosted instances running without strict CSP.

CVSS3: 6.1
25%
Средний
почти 3 года назад

Уязвимостей на страницу