Unrated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

CVE-2024-8179 First seen on SecPulse Dec 12, 2024

Original description The description as published by the source.

An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. Improper output encoding could lead to XSS if CSP is not enabled.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
package git://git@gitlab.com:gitlab-org/gitlab.git
report gitlab.com
report hackerone.com

Key facts

Severity: Unrated
Published: Dec 12, 2024
First seen on SecPulse: Dec 12, 2024
CWE: CWE-79

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:05