Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h79h-c7qx-243v

Опубликовано: 28 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.7

Описание

An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 before 16.9.3, all versions starting from 16.10 before 16.10.1. A wiki page with a crafted payload may lead to a Stored XSS, allowing attackers to perform arbitrary actions on behalf of victims.

An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 before 16.9.3, all versions starting from 16.10 before 16.10.1. A wiki page with a crafted payload may lead to a Stored XSS, allowing attackers to perform arbitrary actions on behalf of victims.

EPSS

Процентиль: 11%
0.00039
Низкий

8.7 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 8.7
ubuntu
около 1 года назад

An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 before 16.9.3, all versions starting from 16.10 before 16.10.1. A wiki page with a crafted payload may lead to a Stored XSS, allowing attackers to perform arbitrary actions on behalf of victims.

CVSS3: 8.7
nvd
около 1 года назад

An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 before 16.9.3, all versions starting from 16.10 before 16.10.1. A wiki page with a crafted payload may lead to a Stored XSS, allowing attackers to perform arbitrary actions on behalf of victims.

CVSS3: 8.7
debian
около 1 года назад

An issue has been discovered in GitLab CE/EE affecting all versions be ...

CVSS3: 8.7
fstec
больше 1 года назад

Уязвимость компонента Wiki Page Handler программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)

EPSS

Процентиль: 11%
0.00039
Низкий

8.7 High

CVSS3

Дефекты

CWE-79