CVE-2017-8778

GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element in an issue attachment or avatar that is an SVG document

published May 4, 2017

CVSS
—
EPSS
1%
Percentile
58.4
In the wild
Unconfirmed
What it is

GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element in an issue attachment or avatar that is an SVG document.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00878 · 58.4th percentile
Published
2017-05-04T15:00Z
EPSS history
Timeline
  • 04 MAY 15:00Z
    GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element in an issue attachment or avatar that is an SVG document
    cvelistv5