CVE-2022-1175

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 allowed an attacker to exploit XSS by injecting HTML in notes.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
GitLab	GitLab	>=14.4, <14.7.7; >=14.8, <14.8.5; >=14.9, <14.9.2

References

http://packetstormsecurity.com/files/166829/Gitlab-14.9-Cross-Site-Scripting.htmlThird Party Advisory, VDB Entry
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1175.jsonVendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/353370Broken Link
https://hackerone.com/reports/1481207Permissions Required, Third Party Advisory
http://packetstormsecurity.com/files/166829/Gitlab-14.9-Cross-Site-Scripting.htmlThird Party Advisory, VDB Entry
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1175.jsonVendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/353370Broken Link
https://hackerone.com/reports/1481207Permissions Required, Third Party Advisory

Timeline

Published: Apr 4, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-11767.5Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96.CVE-2022-11774.3Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0.CVE-2022-11785.4Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.CVE-2022-11795.4Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.CVE-2022-11803.5Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.CVE-2022-11815.4Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2.CVE-2022-11828.8The Visual Slide Box Builder WordPress plugin through 3.2.9 does not sanitise and escape various parameters before using them in SQL stateme CVE-2022-11837.5On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations ar CVE-2022-11845.5A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a loca CVE-2022-11856.5A denial of service vulnerability when rendering RDoc files in GitLab CE/EE versions 10 to 14.7.7, 14.8.0 to 14.8.5, and 14.9.0 to 14.9.2 al CVE-2022-11865.3The WordPress plugin Be POPIA Compliant exposed sensitive information to unauthenticated users consisting of site visitors emails and userna CVE-2022-11876.1The WordPress WP YouTube Live Plugin is vulnerable to Reflected Cross-Site Scripting via POST data found in the ~/inc/admin.php file which a