Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-3092

Опубликовано: 12 апр. 2024
Источник: nvd
CVSS3: 8.7
CVSS3: 5.4
EPSS Низкий

Описание

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. A payload may lead to a Stored XSS while using the diff viewer, allowing attackers to perform arbitrary actions on behalf of victims.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 16.9.0 (включая) до 16.9.4 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 16.9.0 (включая) до 16.9.4 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
Версия от 16.10.0 (включая) до 16.10.2 (исключая)
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Версия от 16.10.0 (включая) до 16.10.2 (исключая)

EPSS

Процентиль: 65%
0.00492
Низкий

8.7 High

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79
CWE-79

Связанные уязвимости

ubuntu логотип

CVE-2024-3092

CVSS3: 8.7
ubuntu
около 1 года назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. A payload may lead to a Stored XSS while using the diff viewer, allowing attackers to perform arbitrary actions on behalf of victims.

debian логотип

CVE-2024-3092

CVSS3: 8.7
debian
около 1 года назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

github логотип

GHSA-qvg5-w5f4-rcwh

CVSS3: 8.7
github
около 1 года назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. A payload may lead to a Stored XSS while using the diff viewer, allowing attackers to perform arbitrary actions on behalf of victims.

EPSS

Процентиль: 65%
0.00492
Низкий

8.7 High

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79
CWE-79