Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m9cp-4p2h-f9p9

Опубликовано: 10 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 17.1 prior 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2. When adding a authorizing an application, it can be made to render as HTML under specific circumstances.

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 17.1 prior 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2. When adding a authorizing an application, it can be made to render as HTML under specific circumstances.

EPSS

Процентиль: 69%
0.0063
Низкий

7.3 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 7.3
nvd
8 месяцев назад

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 17.1 prior 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2. When adding a authorizing an application, it can be made to render as HTML under specific circumstances.

CVSS3: 7.3
debian
8 месяцев назад

A cross-site scripting issue has been discovered in GitLab affecting a ...

CVSS3: 7.3
fstec
12 месяцев назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)

EPSS

Процентиль: 69%
0.0063
Низкий

7.3 High

CVSS3

Дефекты

CWE-79