Unrated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

CVE-2024-8186 First seen on SecPulse Mar 3, 2025

Original description The description as published by the source.

An issue has been discovered in GitLab CE/EE affecting all versions from 16.6 before 17.7.6, 17.8 before 17.8.4, and 17.9 before 17.9.1. An attacker could inject HMTL into the child item search potentially leading to XSS in certain situations.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
package git://git@gitlab.com:gitlab-org/gitlab.git
report gitlab.com
report hackerone.com

Key facts

Severity: Unrated
Published: Mar 3, 2025
First seen on SecPulse: Mar 3, 2025
CWE: CWE-79

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:05