An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 to 16.8.6 all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. Using the autocomplete for issues references feature a crafted payload may lead to a stored XSS, allowing attackers to perform arbitrary actions on behalf of victims.
Metrics
Affected Vendors & Products
References
History
Wed, 11 Dec 2024 19:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* |
Thu, 19 Sep 2024 02:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:gitlab:gitlab:-:*:*:*:-:*:*:* cpe:2.3:a:gitlab:gitlab:16.7.0:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:16.7.0:*:*:*:enterprise:*:*:* cpe:2.3:a:gitlab:gitlab:16.9.0:*:*:*:*:*:*:* |
|
Metrics |
ssvc
|
Thu, 29 Aug 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Gitlab
Gitlab gitlab |
|
CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:* | |
Vendors & Products |
Gitlab
Gitlab gitlab |
MITRE
Status: PUBLISHED
Assigner: GitLab
Published: 2024-04-12T00:53:21.240Z
Updated: 2024-09-18T04:09:30.186Z
Reserved: 2024-03-07T15:30:44.909Z
Link: CVE-2024-2279
Vulnrichment
Updated: 2024-08-01T19:11:52.092Z
NVD
Status : Analyzed
Published: 2024-04-12T01:15:57.750
Modified: 2024-12-11T19:29:27.377
Link: CVE-2024-2279
Redhat
No data.