Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2023-2164

HistoryAug 02, 2023 - 12:15 a.m.

CVE-2023-2164

2023-08-0200:15:16

Debian Security Bug Tracker

security-tracker.debian.org

cve-2023-2164

gitlab

xss

webide beta

version 16.2.2

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

18.1%

JSON

An issue has been discovered in GitLab affecting all versions starting from 15.9 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for an attacker to trigger a stored XSS vulnerability via user interaction with a crafted URL in the WebIDE beta.

OSVersionArchitecturePackageVersionFilename
Debian999allgitlab< 16.0.8+ds1-1gitlab_16.0.8+ds1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	999	all	gitlab	< 16.0.8+ds1-1	gitlab_16.0.8+ds1-1_all.deb