VULNERABILITY INTELLIGENCE

CVE-2022-0124

CVSS score4.3 MEDIUM
EPSS probability0.97%
CISA KEVNot currently listed
Published2022-01-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. Gitlab's Slack integration is incorrectly validating user input and allows to craft malicious URLs that are sent to slack.

Weakness classification

  • nvd@nist.gov: CWE-116

Primary references