GitLab 12.4 < 13.4.7 / 13.5 < 13.5.5 / 13.6 < 13.6.2 (CVE-2020-26407)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6 before 13.6.2 that allows an attacker to perform cross-site scripting to other users via importing a...

CVE-2020-26407

creationtimestamp| type| source ---|---|--- 2020-12-10 12:33:50+00:00| seen| https://t.me/cibsecurity/18724 2020-12-10 12:41:14+00:00| seen| https://t.me/cibsecurity/18744 2020-12-10 13:25:29+00:00| seen| https://t.me/cibsecurity/18764 2020-12-10 14:03:20+00:00| seen| https://t.me/cibsecurity/187...

CVE-2020-26407

GitLab CE/EE contains a cross-site scripting (XSS) vulnerability (CVE-2020-26407) exploitable via importing a malicious project. Affected versions are GitLab 12.4 prior to 13.4.7, 13.5 prior to 13.5.5, and 13.6 prior to 13.6.2. The issue allows an attacker to execute scripts in other users’ brows...