Improper Neutralization of Input During Web Page Generation… (CVE-2024-7047)

Résumé

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A cross site scripting vulnerability exists in GitLab CE/EE affecting all versions from 16.6 prior to 17.0.5, 17.1 prior to 17.1.3, 17.2 prior to 17.2.1 allowing an attacker to execute arbitrary scripts under the context of the current logged in user.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"16.6.0"},{"fixed":"17.0.5"},{"introduced":"17.1.0"},{"fixed":"17.1.3"},{"introduced":"17.2.0"},{"fixed":"17.2.1"}]}]

Références

web gitlab.com
web nvd.nist.gov