CVE-2022-4007: GitLab

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8 prior to 15.8.4, and version 15.9 prior to 15.9.2 A cross-site scripting vulnerability was found in the title field of work items that allowed attackers to perform arbitrary actions on behalf of victims at client side.

Affected products

• GitLab GitLab: from 15.3, before 15.7.8 (fixed in 15.7.8); from 15.8.0, before 15.8.4 (fixed in 15.8.4); from 15.9.0, before 15.9.2 (fixed in 15.9.2)

Published 2023-03-08. Last modified 2026-06-17.