CVE-2022-2904
A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 It was possible to exploit a vulnerability in the external status checks feature which could lead to a stored XSS that allowed attackers to perform arbitrary actions on behalf of victims at client side.
| Software | From | Fixed in |
|---|---|---|
| gitlab / gitlab | 15.3 | 15.3.4 |
| gitlab / gitlab | 15.4 | 15.4.x |
| gitlab / gitlab | 15.3 | 15.3.4.x |
| gitlab / gitlab | 15.2 | 15.2.5 |
| gitlab / gitlab | 15.2 | 15.2.5.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime