Loading HuntDB...

GHSA-m9cp-4p2h-f9p9

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 17.1 prior 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2. When adding a authorizing an application, it can be made to render as HTML under specific circumstances.

Related CVEs

Key Information

GHSA ID
GHSA-m9cp-4p2h-f9p9
Published
October 10, 2024 12:31 PM
Last Modified
October 10, 2024 12:31 PM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: August 1, 2025 6:44 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.