CVE-2022-1940

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A Stored Cross-Site Scripting vulnerability in Jira integration in GitLab EE affecting all versions from 13.11 prior to 14.9.5, 14.10 prior to 14.10.4, and 15.0 prior to 15.0.1 allows an attacker to execute arbitrary JavaScript code in GitLab on a victim's behalf via specially crafted Jira Issues

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
GitLab	GitLab	>=13.11, <14.9.5; >=14.10, <14.10.4; >=15.0, <15.0.1

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1940.jsonPatch, Third Party Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/359142Broken Link
https://hackerone.com/reports/1533976Permissions Required
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1940.jsonPatch, Third Party Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/359142Broken Link
https://hackerone.com/reports/1533976Permissions Required

Timeline

Published: Jun 6, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-19417.5A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.CVE-2022-19427.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-19437.8A flaw out of bounds memory write in the Linux kernel UDF file system functionality was found in the way user triggers some file operation w CVE-2022-19447.1When the feature is configured, improper authorization in the Interactive Web Terminal in GitLab CE/EE affecting all versions from 11.3 prio CVE-2022-19454.8The Coming Soon & Maintenance Mode by Colorlib WordPress plugin before 1.0.99 does not sanitize and escape some settings, allowing high priv CVE-2022-19466.1The Gallery WordPress plugin before 2.0.0 does not sanitise and escape a parameter before outputting it back in the response of an AJAX acti CVE-2022-19476.5Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3.CVE-2022-19485.4An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1. Missing validation of input used in quick ac CVE-2022-19497.5An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that CVE-2022-19509.8The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action ava CVE-2022-19516.1The core plugin for kitestudio WordPress plugin before 2.3.1 does not sanitise and escape some parameters before outputting them back in a r CVE-2022-19529.8The Free Booking Plugin for Hotels, Restaurant and Car Rental WordPress plugin before 1.1.16 suffers from insufficient input validation whic