Vulnerabilities
VEX
CWE
ATT&CK
KEV Catalogs
All catalogs
GCVE
CISA
CIRCL
ENISA
Shadowserver
Previdian
Community
Sightings
Comments
Bundles
Organizations
Contributors
Statistics
Log in
About
Search term
Success
← All credits
Thanks @rafaltrojniak for reporting this vulnerability through our HackerOne bug bounty program
1 vulnerability record and advisories credit this contributor.
CVE-2022-0124
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. Gitlab's Slack integration is incorrectly validating user input and allows to craft malicious URLs that are sent to slack.