Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2024-3092

Published: 12/04/2024 Updated: 12/04/2024

Vulnerability Summary

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.9.4, all versions starting from 16.10 prior to 16.10.2. A payload may lead to a Stored XSS while using the diff viewer, allowing malicious users to perform arbitrary actions on behalf of victims.

Vulnerability Trend

References

https://gitlab.com/gitlab-org/gitlab/-/issues/452510https://hackerone.com/reports/2441257https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook