Ubuntu.comUB:CVE-2024-1451CVE-2024-1451
8.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
8.3 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
30.1%
An issue has been discovered in GitLab CE/EE affecting all versions
starting from 16.9 before 16.9.1. A crafted payload added to the user
profile page could lead to a stored XSS on the client side, allowing
attackers to perform arbitrary actions on behalf of victims."
Related
8.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
8.3 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
30.1%