CVE-2023-6371: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

First published: Thu Mar 28 2024(Updated: )

An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 before 16.9.3, all versions starting from 16.10 before 16.10.1. A wiki page with a crafted payload may lead to a Stored XSS, allowing attackers to perform arbitrary actions on behalf of victims.

Credit: cve@gitlab.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/remedy
• agent/weakness
• agent/references
• agent/title
• agent/type
• agent/description
• agent/first-publish-date
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• collector/nvd-api
• source/NVD
• agent/author
• agent/severity
• agent/tags
• agent/event