Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-3500
HistoryAug 02, 2023 - 1:15 a.m.

Cross site scripting

2023-08-0201:15:00
PRIOn knowledge base
www.prio-n.com
6
gitlab
cross site scripting
reflected xss
plantuml diagrams

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.7%

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A reflected XSS was possible when creating specific PlantUML diagrams that allowed the attacker to perform arbitrary actions on behalf of victims.

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.7%