CVE-2024-8179
published 2024-12-12CVE-2024-8179: An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. Improper output…
PriorityP425medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
0.32%
23.5th percentile
An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. Improper output encoding could lead to XSS if CSP is not enabled.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gitlab | < gitlab 17.5.5-1 (sid) | gitlab 17.5.5-1 (sid) |
| gitlab | gitlab | — | — |
| gitlab | gitlab | >= 17.3 < 17.4.6 | 17.4.6 |
| gitlab | gitlab | >= 17.3.0 < 17.4.6 | 17.4.6 |
| gitlab | gitlab | >= 17.5 < 17.5.4 | 17.5.4 |
| gitlab | gitlab | >= 17.5.0 < 17.5.4 | 17.5.4 |
| gitlab | gitlab | >= 17.6 < 17.6.2 | 17.6.2 |
| gitlab | gitlab | >= 17.6.0 < 17.6.2 | 17.6.2 |
| gitlab | gitlab_ce | — | — |
CVSS provenance
nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
osv5.4MEDIUM
vendor_debian5.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2024-8179: An issue has been discovered in GitLab CE/EE affecting all versions from 17
osv·2024-12-12·CVSS 5.4
CVE-2024-8179 [MEDIUM] CVE-2024-8179: An issue has been discovered in GitLab CE/EE affecting all versions from 17
An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. Improper output encoding could lead to XSS if CSP is not enabled.
GHSA
GHSA-239w-f2px-h2wv: An issue has been discovered in GitLab CE/EE affecting all versions from 17
ghsa_unreviewed·2024-12-12
CVE-2024-8179 [MEDIUM] CWE-79 GHSA-239w-f2px-h2wv: An issue has been discovered in GitLab CE/EE affecting all versions from 17
An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. Improper output encoding could lead to XSS if CSP is not enabled.
GitLab
CVE-2024-8179: An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. Improper outp
vendor_gitlab·2024-12-12·CVSS 5.4
CVE-2024-8179 [MEDIUM] CWE-79 CVE-2024-8179: An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. Improper outp
CVE-2024-8179: An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. Improper output encoding could lead to XSS if CSP is not enabled.
Debian
CVE-2024-8179: gitlab - An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 be...
vendor_debian·2024·CVSS 5.4
CVE-2024-8179 [MEDIUM] CVE-2024-8179: gitlab - An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 be...
An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. Improper output encoding could lead to XSS if CSP is not enabled.
Scope: local
sid: resolved (fixed in 17.5.5-1)
Suricata
GPL RPC mountd TCP mount path overflow attempt
suricata·2010-09-23
CVE-2003-0252 GPL RPC mountd TCP mount path overflow attempt
GPL RPC mountd TCP mount path overflow attempt
Rule: alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:"GPL RPC mountd TCP mount path overflow attempt"; flow:established,to_server; content:"|00 01 86 A5 00|"; depth:5; offset:16; content:"|00 00 00 01|"; within:4; distance:3; byte_jump:4,4,relative,align; byte_jump:4,4,relative,align; byte_test:4,>,1023,0,relative; content:"|00 00 00 00|"; depth:4; offset:8; reference:bugtraq,8179; reference:cve,2003-0252; reference:nessus,11800; classtype:misc-attack; sid:2102184; rev:9; metadata:created_at 2010_09_23, cve CVE_2003_0252, confidence Medium, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_08;)
No public exploits indexed.
No writeups or analysis indexed.
2024-12-12
Published