Loading HuntDB...

GHSA-27jm-6pj2-8w7g

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2. Improper output encoding in the snipper viewer functionality lead to Cross-Site scripting attacks.

Related CVEs

Key Information

GHSA ID
GHSA-27jm-6pj2-8w7g
Published
June 12, 2025 12:32 PM
Last Modified
June 12, 2025 12:32 PM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: June 17, 2025 6:25 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.