Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fjj2-x466-w3hx

Опубликовано: 11 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.7

Описание

GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability code flow displays.

GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability code flow displays.

EPSS

Процентиль: 44%
0.00515
Низкий

8.7 High

CVSS3

Дефекты

CWE-116

Связанные уязвимости

CVSS3: 7.7
ubuntu
11 месяцев назад

GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability code flow displays.

CVSS3: 7.7
nvd
11 месяцев назад

GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability code flow displays.

CVSS3: 7.7
debian
11 месяцев назад

GitLab has remediated a security issue in GitLab CE/EE affecting all v ...

CVSS3: 8.7
fstec
11 месяцев назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с некорректным кодированием или экранированием выходных данных, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 44%
0.00515
Низкий

8.7 High

CVSS3

Дефекты

CWE-116