Описание
Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows an attacker to perform arbitrary HTTP POST requests on a user's behalf leading to potential account takeover
| Релиз | Статус | Примечание |
|---|---|---|
| esm-apps-legacy/xenial | ignored | not maintainable |
| esm-apps/xenial | ignored | end of ESM support, was ignored [not maintainable] |
| trusty | ignored | end of standard support |
| upstream | needs-triage | |
| xenial | ignored | end of standard support |
Показывать по
6.8 Medium
CVSS2
7.7 High
CVSS3
Связанные уязвимости
Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows an attacker to perform arbitrary HTTP POST requests on a user's behalf leading to potential account takeover
Missing sanitization of HTML attributes in Jupyter notebooks in all ve ...
Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows an attacker to perform arbitrary HTTP POST requests on a user's behalf leading to potential account takeover
6.8 Medium
CVSS2
7.7 High
CVSS3