A XSS issue in Gitlab CE/EE

Free Trial

A XSS issue in Gitlab CE/EE

http://annedickson.co.uk/books/the-mirror-within/ Overview :

XSS issue in Gitlab CE/EE

http://livingriver.eu/?m=201905 Affected Product(s) :

from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6 before 13.6.2

Vulnerability Details :

CVE ID :

CVE-2020-26407

A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6 before 13.6.2 that allows an attacker to perform cross-site scripting to other users via importing a malicious project

Solution :

This Vulnerability has been fixed now in the latest versions

Contact us to get started

CVE-2024-26922 : LINUX KERNEL UP TO 6.9-RC4 AMDGPU PRIVILEGE ESCALATION

Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate the parameters of bo mapping operations more

Learn more

CVE-2024-21511 : MYSQL2 UP TO 3.9.6 READCODEFOR TIMEZONE CODE INJECTION

Description Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the

Learn more

CVE-2024-29733 : APACHE AIRFLOW UP TO 3.6.X FTP PROVIDER CERTIFICATE VALIDATION

Description Improper Certificate Validation vulnerability in Apache Airflow FTP Provider. The FTP hook lacks complete certificate validation in FTP_TLS connections,

Learn more