CVE-2022-1416

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-1416
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1416.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-1416
Aliases
Published
2022-05-19T17:10:07Z
Modified
2026-04-10T04:42:44.811886Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 allows for rendering of attacker controlled HTML tags and CSS styling

Database specific 
{
    "cna_assigner": "GitLab",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1416.json"
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
3a2b273316fb29d63b489906f85d9b5329377258
Fixed
bba387c3128c9725b46e3b9dee0ac3809ca89c40
Database specific 
{
    "versions": [
        {
            "introduced": "1.0.2"
        },
        {
            "fixed": "14.8.6"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
1fdefb34741e329ede520eba6c3038eb48bfa191
Fixed
58f08854bfbbc83c197c44d1143c253d6ddd0d4e
Database specific 
{
    "versions": [
        {
            "introduced": "14.9.0"
        },
        {
            "fixed": "14.9.4"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
ad109bc62af12e7a4e8da0a93255cf7d795705a0
Fixed
d849687d600c475e7a9a572c6f6e545aca8fa21e
Database specific 
{
    "versions": [
        {
            "introduced": "14.10.0"
        },
        {
            "fixed": "14.10.1"
        }
    ]
}

Affected versions

v14.*
v14.10.0-ee
v14.9.0-ee
v14.9.1-ee
v14.9.3-ee

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1416.json"