Lucene search
+L

5 matches found

Tenable Nessus
Tenable Nessus
added 2024/02/22 12:0 a.m.41 views

FreeBSD : Gitlab -- Vulnerabilities (03bf5157-d145-11ee-acee-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 03bf5157-d145-11ee-acee-001b217b3468 advisory. - An issue has been discovered in GitLab affecting all versions before 16.7.6, all versions...

8.7CVSS6.3AI score0.51467EPSS
Exploits0References10
Cvelist
Cvelist
added 2024/02/21 11:30 p.m.273 views

CVE-2024-1451 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.1. A crafted payload added to the user profile page could lead to a stored XSS on the client side, allowing attackers to perform arbitrary actions on behalf of victims."...

8.7CVSS8.2AI score0.51467EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/02/21 11:30 p.m.20 views

CVE-2024-1451 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.1. A crafted payload added to the user profile page could lead to a stored XSS on the client side, allowing attackers to perform arbitrary actions on behalf of victims."...

8.7CVSS5.8AI score0.51467EPSS
Exploits0References2
CVE
CVE
added 2024/02/21 11:30 p.m.117 views

CVE-2024-1451

GitLab CE/EE contains a stored XSS vulnerability (CVE-2024-1451) affecting all versions from 16.9 up to 16.9.0. A crafted payload on the user profile page could execute arbitrary actions in victims’ browsers. Root cause: improper input handling leading to stored XSS. Impact is client-side comprom...

8.7CVSS8.1AI score0.51467EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/02/21 12:0 a.m.60 views

GitLab 16.9.0 < 16.9.1 (CVE-2024-1451)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.1. A crafted payload added to the user profile page could lead to a stored XSS on the client side,...

8.7CVSS8AI score0.51467EPSS
Exploits0References4
Rows per page
Query Builder