Loading HuntDB...

GHSA-8r4j-q2x9-54v8

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 17.3.6, 17.4 before 17.4.3, and 17.5 before 17.5.1. An attacker could inject HTML into the Global Search field on a diff view leading to XSS.

Related CVEs

Key Information

GHSA ID
GHSA-8r4j-q2x9-54v8
Published
October 24, 2024 12:31 PM
Last Modified
October 24, 2024 12:31 PM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: June 15, 2025 6:24 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.