Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qvg5-w5f4-rcwh

Опубликовано: 12 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.7

Описание

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. A payload may lead to a Stored XSS while using the diff viewer, allowing attackers to perform arbitrary actions on behalf of victims.

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. A payload may lead to a Stored XSS while using the diff viewer, allowing attackers to perform arbitrary actions on behalf of victims.

EPSS

Процентиль: 65%
0.00492
Низкий

8.7 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 8.7
ubuntu
около 1 года назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. A payload may lead to a Stored XSS while using the diff viewer, allowing attackers to perform arbitrary actions on behalf of victims.

CVSS3: 8.7
nvd
около 1 года назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. A payload may lead to a Stored XSS while using the diff viewer, allowing attackers to perform arbitrary actions on behalf of victims.

CVSS3: 8.7
debian
около 1 года назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

EPSS

Процентиль: 65%
0.00492
Низкий

8.7 High

CVSS3

Дефекты

CWE-79