Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 allowed an attacker to exploit XSS by injecting HTML in notes.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Vulnerability Type
N/A
Vulnerability Title
GitLab Enterprise Edition 跨站脚本漏洞
Vulnerability Description
GitLab Enterprise Edition是一套内容管理系统。 GitLab Enterprise Edition 14.4.0版本到14.9.1版本存在跨站脚本漏洞，该漏洞源于对注释中用户提供的数据的清理不足。远程用户可以利用该漏洞在易受攻击的网站上下文中在用户浏览器中注入和执行任意 HTML 和脚本代码。
CVSS Information
N/A
Vulnerability Type
N/A