CVE-2023-5933CWE-80

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab

Medium · published January 26, 2024

CVSS v3.1
6.4
EPSS
1%
Percentile
51.7
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab CE/EE affecting all versions after 13.7 before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. Improper input sanitization of user name allows arbitrary API PUT requests.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00677 · 51.7th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2024-01-26T01:02Z
EPSS history
Timeline
  • 26 JAN 01:02Z
    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab
    cvelistv5