Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2r7r-6rh2-7qc9

Опубликовано: 23 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed an authenticated user to perform cross-site scripting attacks when the instance is served through certain content delivery networks.

An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed an authenticated user to perform cross-site scripting attacks when the instance is served through certain content delivery networks.

EPSS

Процентиль: 3%
0.00018
Низкий

7.7 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 7.7
ubuntu
17 дней назад

An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed an authenticated user to perform cross-site scripting attacks when the instance is served through certain content delivery networks.

CVSS3: 7.7
nvd
17 дней назад

An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed an authenticated user to perform cross-site scripting attacks when the instance is served through certain content delivery networks.

CVSS3: 7.7
debian
17 дней назад

An issue has been discovered in GitLab CE/EE affecting all versions fr ...

CVSS3: 7.7
fstec
18 дней назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS)

EPSS

Процентиль: 3%
0.00018
Низкий

7.7 High

CVSS3

Дефекты

CWE-79