Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4rph-jr9g-hq9q

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element in an issue attachment or avatar that is an SVG document.

GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element in an issue attachment or avatar that is an SVG document.

EPSS

Процентиль: 23%
0.00074
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
ubuntu
около 8 лет назад

GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element in an issue attachment or avatar that is an SVG document.

CVSS3: 6.1
nvd
около 8 лет назад

GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element in an issue attachment or avatar that is an SVG document.

CVSS3: 6.1
debian
около 8 лет назад

GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 h ...

EPSS

Процентиль: 23%
0.00074
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79