Headline

CVE-2023-1836: 2023/CVE-2023-1836.json · master · GitLab.org / cves · GitLab

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. When viewing an XML file in a repository in “raw” mode, it can be made to render as HTML if viewed under specific circumstances

1 year ago

CVE

Open in Source

#xss #js #git #auth

GitLab

- GitLab: the DevOps platform
- Explore GitLab
- Install GitLab
- How GitLab compares
- Get started
- GitLab docs
- GitLab Learn
Pricing
Talk to an expert
/
Help
- Help
- Support
- Community forum
- Submit feedback
- Contribute to GitLab
Projects Groups Topics Snippets
Register
Sign in

The 16.0 major release is coming on May 22, 2023! This version brings many exciting improvements to GitLab, but also removes some deprecated features. These changes are going live on GitLab.com now, continuing up to May 22, 2023, when GitLab 16.0 is released. Visit the deprecations page to see what is scheduled for removal.