VDB
CVE-2023-1836
CVE-2023-1836
PUBLISHED
CVSS 5.400000095367432 MEDIUM
A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. When viewing an XML file in a repository in "raw" mode, it can be made to render as HTML if viewed under specific circumstances
EPSS 0.75% · 53.3th percentile
Risk Scores
CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.75%
53.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 15.10.0, 15.11.0, 5.1.0 |
| Bitnami | gitlab | 5.1.0, 15.10.0, 15.11.0 |
Timeline
- May 2, 2023 CVE Published
- May 4, 2023 EPSS Score
- Jan 29, 2025 CVE Updated
- Mar 17, 2025 EPSS Score
- May 1, 2025 EPSS Score
- May 5, 2025 EPSS Score
- Jun 1, 2025 EPSS Score
- Jun 4, 2025 EPSS Score
- Jul 1, 2025 EPSS Score
- Jul 5, 2025 EPSS Score
- Aug 1, 2025 EPSS Score
- Aug 4, 2025 EPSS Score