23 matches found
CVE-2017-8778
GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element in an issue attachment or avatar that is an SVG document...
6.1CVSS5.9AI score0.00878EPSS
SaveExploits1References2
CVE-2017-8778
GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element in an issue attachment or avatar that is an SVG document...
6.1CVSS5.4AI score
SaveExploits0References2
CVE-2017-8778: Improper Neutralization of Input During Web Page Generation
GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element in an issue attachment or avatar that is an SVG document...
6.1CVSS5.7AI score0.00878EPSS
SaveExploits1References2
20