CVE-2022-2428
17.10.2022, 16:15
A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6, 15.2 to 15.2.4, and 15.3 to 15.3.2 allows an attacker to issue arbitrary HTTP requests
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 𝑥 < 15.1.6 |
| gitlab | gitlab | 15.2 ≤ 𝑥 < 15.2.4 |
| gitlab | gitlab | 15.3 ≤ 𝑥 < 15.3.2 |
𝑥
= Vulnerable software versions
References