Ubuntu.comUB:CVE-2023-1836CVE-2023-1836
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.002 Low
EPSS
Percentile
58.5%
A cross-site scripting issue has been discovered in GitLab affecting all
versions starting from 5.1 before 15.9.6, all versions starting from 15.10
before 15.10.5, all versions starting from 15.11 before 15.11.1. When
viewing an XML file in a repository in “raw” mode, it can be made to render
as HTML if viewed under specific circumstances
References
Related
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.002 Low
EPSS
Percentile
58.5%