Lucene search
FreeBSDDAD6294C-F7C1-11EE-BB77-001B217B3468HistoryApr 10, 2024 - 12:00 a.m.
Gitlab -- Patch Release: 16.10.2, 16.9.4, 16.8.6
2024-04-1000:00:00
vuxml.freebsd.org
8
gitlab
patch release
stored xss
redos
unix
diff viewer
autocomplete
integrations
chat messages
junit test report
8.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
Gitlab reports:
Stored XSS injected in diff viewer
Stored XSS via autocomplete results
Redos on Integrations Chat Messages
Redos During Parse Junit Test Report
Related
nessus
nessus
osv
osv
BIT-gitlab-2024-2279
2024-04-16 07:19:14
BIT-gitlab-2023-6678
2024-04-16 07:22:40
CVE-2024-2279
2024-04-12 01:15:57
nvd
nvd
cvelist
cvelist
ubuntucve
ubuntucve
cve
cve
debiancve
debiancve
vulnrichment
vulnrichment
8.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
Related for DAD6294C-F7C1-11EE-BB77-001B217B3468