Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-2255

Опубликовано: 27 мар. 2025
Источник: debian

Описание

An issue has been discovered in Gitlab EE/CE for AppSec affecting all versions from 13.5.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. Certain error messages could allow Cross-Site Scripting attacks (XSS). for AppSec.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
gitlabunfixedpackage

Связанные уязвимости

CVSS3: 8.7
ubuntu
3 месяца назад

An issue has been discovered in Gitlab EE/CE for AppSec affecting all versions from 13.5.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. Certain error messages could allow Cross-Site Scripting attacks (XSS). for AppSec.

CVSS3: 8.7
nvd
3 месяца назад

An issue has been discovered in Gitlab EE/CE for AppSec affecting all versions from 13.5.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. Certain error messages could allow Cross-Site Scripting attacks (XSS). for AppSec.

CVSS3: 8.7
github
3 месяца назад

An issue has been discovered in Gitlab EE/CE for AppSec affecting all versions from 13.5.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. Certain error messages could allow Cross-Site Scripting attacks (XSS). for AppSec.

CVSS3: 8.7
fstec
3 месяца назад

Уязвимость модуля Application security (AppSec) программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю проводить межсайтовые сценарные атаки