Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-2442
HistoryJun 07, 2023 - 4:15 p.m.

Cross site scripting

2023-06-0716:15:00
PRIOn knowledge base
www.prio-n.com
12
gitlab
ce
ee
xss
merge request

5.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.9%

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A specially crafted merge request could lead to a stored XSS on the client side which allows attackers to perform arbitrary actions on behalf of victims.

5.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.9%