{"id":"CVE-2022-3573","state":"PUBLISHED","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7","description":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. Due to the improper filtering of query parameters in the wiki changes page, an attacker can execute arbitrary JavaScript on the self-hosted instances running without strict CSP.","publishedAt":"2023-01-12T00:00:00.000Z","updatedAt":"2025-04-08T15:15:38.863Z","severity":{"score":5.4,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","source":"GitLab"},"assigner":"GitLab","products":["GitLab GitLab"],"affected":[{"vendor":"GitLab","product":"GitLab","versions":[{"version":">=15.4, <15.5.7","status":"affected"},{"version":">=15.6, <15.6.4","status":"affected"},{"version":">=15.7, <15.7.2","status":"affected"}]}],"references":["https://gitlab.com/gitlab-org/gitlab/-/issues/378216","https://hackerone.com/reports/1730461","https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3573.json"],"weaknesses":["CWE-79"],"ingestedAt":"2026-10-29T19:50:32.060Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/3xxx/CVE-2022-3573.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-3573","state":"PUBLISHED","datePublished":"2023-01-12T00:00:00.000Z","dateUpdated":"2025-04-08T15:15:38.863Z","assignerShortName":"GitLab","assignerOrgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","dateReserved":"2022-10-17T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. Due to the improper filtering of query parameters in the wiki changes page, an attacker can execute arbitrary JavaScript on the self-hosted instances running without strict CSP."}],"affected":[{"vendor":"GitLab","product":"GitLab","versions":[{"version":">=15.4, <15.5.7","status":"affected"},{"version":">=15.6, <15.6.4","status":"affected"},{"version":">=15.7, <15.7.2","status":"affected"}]}],"references":[{"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/378216"},{"url":"https://hackerone.com/reports/1730461"},{"url":"https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3573.json"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM"}}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"Improper neutralization of input during web page generation ('cross-site scripting') in GitLab"}]}],"providerMetadata":{"shortName":"GitLab","orgId":"ceab7361-8a18-47b1-92ba-4d7d25f6715a","dateUpdated":"2023-01-12T00:00:00.000Z"},"credits":[{"lang":"en","value":"Thanks [ryotak](https://hackerone.com/ryotak) for reporting this vulnerability through our HackerOne bug bounty program"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/378216","tags":["x_transferred"]},{"url":"https://hackerone.com/reports/1730461","tags":["x_transferred"]},{"url":"https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3573.json","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T01:14:02.089Z"}},{"title":"CISA ADP Vulnrichment","references":[{"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/378216","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-08T15:15:35.539787Z","id":"CVE-2022-3573","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-79","type":"CWE","lang":"en","description":"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-08T15:15:38.863Z"}}]}}}