Loading HuntDB...

GHSA-2vqg-gr4m-v458

GitHub Security Advisory

⚠ Unreviewed MODERATE Has CVE

Advisory Details

A stored Cross-Site Scripting vulnerability in the Jira integration in GitLab version 13.7 and above allows an attacker to execute arbitrary JavaScript code on the victim's behalf via malicious Jira API responses

Related CVEs

Key Information

GHSA ID
GHSA-2vqg-gr4m-v458
Published
May 24, 2022 7:16 PM
Last Modified
May 24, 2022 7:16 PM
CVSS Score
5.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: August 4, 2025 6:39 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.