VDB
CVE-2023-1836
CVE-2023-1836
PUBLISHED
A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. When viewing an XML file in a repository in "raw" mode, it can be made to render as HTML if viewed under specific circumstances
EPSS 4.31% · 89.1th percentile
Risk Scores
EPSS Score
4.31%
89.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 15.10.0, 15.11.0, 5.1.0 |
| Bitnami | gitlab | 5.1.0, 15.10.0, 15.11.0 |
Exploit Intelligence
Timeline
- May 2, 2023 CVE Published
- May 4, 2023 EPSS Score
- May 4, 2023 CVE Updated
- Jul 17, 2023 EPSS Score
- Sep 29, 2023 EPSS Score
- Dec 12, 2023 EPSS Score
- Feb 24, 2024 EPSS Score
- Apr 1, 2024 EPSS Score
- Jun 14, 2024 EPSS Score
- Aug 27, 2024 EPSS Score
- Nov 8, 2024 EPSS Score
- Jan 22, 2025 EPSS Score