Lucene search
Veracode Vulnerability DatabaseVERACODE:41534HistoryJul 23, 2023 - 1:15 p.m.
HTML Injection
2023-07-2313:15:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
gitlab
html injection
vulnerable
issue description
software
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
0.001 Low
EPSS
Percentile
34.3%
gitlab is vulnerable to HTML Injection. The vulnerability exists because the search timeout could be triggered if the attacker injects and execute a maliciously crafted HTML payload into the issue description.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 | |
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 |
Related
osv
osv
CVE-2023-1787
2023-04-05 21:15:07
BIT-gitlab-2023-1787
2024-03-06 11:10:34
cve
cve
CVE-2023-1787
2023-04-05 21:15:07
debiancve
debiancve
CVE-2023-1787
2023-04-05 21:15:07
cvelist
cvelist
CVE-2023-1787
2023-04-05 00:00:00
nvd
nvd
CVE-2023-1787
2023-04-05 21:15:07
nessus
nessus
GitLab 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-1787)
2023-04-04 00:00:00
GitLab < 15.8.5 (SECURITY-RELEASE-GITLAB-15-10-1-RELEASED)
2024-01-03 00:00:00
prion
prion
Design/Logic Flaw
2023-04-05 21:15:00
ubuntucve
ubuntucve
CVE-2023-1787
2023-04-05 00:00:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
0.001 Low
EPSS
Percentile
34.3%
Related for VERACODE:41534