CVE-2023-2164
MEDIUM5.4EPSS 52.2%Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
發布日:2024/3/6修改日:2025/5/20
也稱為:BIT-gitlab-2023-2164
描述
An issue has been discovered in GitLab affecting all versions starting from 15.9 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for an attacker to trigger a stored XSS vulnerability via user interaction with a crafted URL in the WebIDE beta.
受影響套件(1)
- Bitnami/gitlab>= 15.9.0, < 16.0.8, >= 16.1.0, < 16.1.3, >= 16.2.0, < 16.2.2
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM5.4 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |