CVE-2017-0924

CWE-79 — Cross-site Scripting (XSS)5 documents5 sources
Severity
6.1MEDIUM
EPSS
0.1%
top 77.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Gitlab GitlabGitlab Gitlab Community AND Enterprise Editions
Timeline
PublishedMar 21
Latest updateMay 13

Description

Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶NVDgitlab/gitlab9.0.0 — 9.5.10+3

🔴Vulnerability Details

2
GHSA
GHSA-98jh-h83f-7fv7: Gitlab Community Edition version 10↗2022-05-13
▶
CVEList
CVE-2017-0924: Gitlab Community Edition version 10↗2018-03-21
▶

📋Vendor Advisories

2
GitLab
CVE-2017-0924: Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting↗2018-03-21
▶
Debian
CVE-2017-0924: gitlab - Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validatio...↗2017
▶
CVE-2017-0924 (MEDIUM CVSS 6.1) | Gitlab Community Edition version 10 | cvebase.io