PT-2025-9086
CVE-2024-8186
·
Publicado
2025-02-28
·
Atualizado
2025-03-07
Descrição por
CVSS 2.0
5.5
MédiaMétricasAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
GitLab CE/EE versions 16.6 through 17.7.5
GitLab CE/EE versions 17.8 through 17.8.3
GitLab CE/EE versions 17.9 through 17.9.0
Description
An issue has been discovered in GitLab CE/EE where an attacker could inject HTML into the child item search, potentially leading to XSS in certain situations.
Recommendations
For versions 16.6 through 17.7.5, update to version 17.7.6 or later.
For versions 17.8 through 17.8.3, update to version 17.8.4 or later.
For versions 17.9 through 17.9.0, update to version 17.9.1 or later.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾