CVE-2021-22185

Опубликовано: 24 мар. 2021

Источник: debian

EPSS Низкий

Описание

Insufficient input sanitization in wikis in GitLab version 13.8 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted commit to a wiki

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
gitlab	not-affected			package

Примечания

https://about.gitlab.com/releases/2021/03/04/security-release-gitlab-13-9-2-released/

EPSS

Процентиль: 33%

0.00128

Низкий

Связанные уязвимости

CVE-2021-22185

CVSS3: 5.4

ubuntu

около 4 лет назад

Insufficient input sanitization in wikis in GitLab version 13.8 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted commit to a wiki

CVE-2021-22185

CVSS3: 5.4

nvd

около 4 лет назад

Insufficient input sanitization in wikis in GitLab version 13.8 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted commit to a wiki

GHSA-wf25-2f67-3rmc

github

около 3 лет назад

Insufficient input sanitization in wikis in GitLab version 13.8 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted commit to a wiki

EPSS

Процентиль: 33%

0.00128

Низкий