← Database

CVE-2022-2428

MEDIUM CVSS: 6.4 Published: 2022-10-17 Modified: 2026-06-17

Description

A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6, 15.2 to 15.2.4, and 15.3 to 15.3.2 allows an attacker to issue arbitrary HTTP requests

Affected Platforms

Gitlab Gitlab

Weakness Type

CWE-79

References