Lucene search
K

GitLab: Cross-site Scripting (XSS) - Stored in RDoc wiki pages

🗓️ 28 Jul 2019 15:31:34Reported by vakzzType 
hackerone
 hackerone
🔗 hackerone.com👁 27 Views

There is a cross-site scripting (XSS) vulnerability in GitLab RDoc wiki pages allowing attackers to place links taking over the entire page, intercept clicks, and potentially create fake login forms. The anchor tag attributes in image links are not properly sanitized

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation