Veracode Vulnerability DatabaseVERACODE:44859Cross-site Scripting
8.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
5.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
27.6%
gitlab:sid is vulnerable of cross site scripting. The vulnerability due to the manipulation with an unknown input in Jira integration configuration in GitLab CE/EE and does not neutralize user-controllable input before it is placed in output. It leads to cross site scripting by allow an attacker to execute javascript in victim’s browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 | |
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 |
Related
8.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
5.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
27.6%