CVE-2023-5933

MEDIUM5.4EPSS 10.4%

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab

發布日:2024/3/6修改日:2025/5/20

描述

An issue has been discovered in GitLab CE/EE affecting all versions after 13.7 before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. Improper input sanitization of user name allows arbitrary API PUT requests.

受影響套件(1)

  • Bitnami/gitlab>= 13.7.0, < 16.6.6, >= 16.7.0, < 16.7.4, >= 16.8.0, < 16.8.1

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1MEDIUM5.4CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

參考連結(4)