Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pw3w-gf65-52v7

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Client-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through 13.0.1 allows a specially crafted Mermaid payload to PUT requests on behalf of other users via clicking on a link

Client-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through 13.0.1 allows a specially crafted Mermaid payload to PUT requests on behalf of other users via clicking on a link

EPSS

Процентиль: 44%
0.0021
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
ubuntu
около 5 лет назад

Client-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through 13.0.1 allows a specially crafted Mermaid payload to PUT requests on behalf of other users via clicking on a link

CVSS3: 6.1
nvd
около 5 лет назад

Client-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through 13.0.1 allows a specially crafted Mermaid payload to PUT requests on behalf of other users via clicking on a link

CVSS3: 6.1
debian
около 5 лет назад

Client-Side code injection through Mermaid markup in GitLab CE/EE 12.9 ...

EPSS

Процентиль: 44%
0.0021
Низкий

Дефекты

CWE-79