Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4jhx-xj9w-gw72

Опубликовано: 06 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1. A stored XSS flaw in job error messages allows attackers to perform arbitrary actions on behalf of victims at client side.

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1. A stored XSS flaw in job error messages allows attackers to perform arbitrary actions on behalf of victims at client side.

EPSS

Процентиль: 86%
0.02855
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.4
ubuntu
больше 3 лет назад

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1. A stored XSS flaw in job error messages allows attackers to perform arbitrary actions on behalf of victims at client side.

CVSS3: 4.4
nvd
больше 3 лет назад

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1. A stored XSS flaw in job error messages allows attackers to perform arbitrary actions on behalf of victims at client side.

CVSS3: 4.4
debian
больше 3 лет назад

A cross-site scripting issue has been discovered in GitLab CE/EE affec ...

EPSS

Процентиль: 86%
0.02855
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79