VDB
CVE-2023-1836
CVE-2023-1836
PUBLISHED
A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. When viewing an XML file in a repository in "raw" mode, it can be made to render as HTML if viewed under specific circumstances
EPSS 4.31% · 89.1th percentile
Risk Scores
EPSS Score
4.31%
89.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 15.10.0, 15.11.0, 5.1.0 |
| Bitnami | gitlab | 5.1.0, 15.10.0, 15.11.0 |
Timeline
- May 2, 2023 CVE Published
- May 4, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 29, 2023 EPSS Score
- Dec 12, 2023 EPSS Score
- Feb 24, 2024 EPSS Score
- Apr 1, 2024 EPSS Score
- Jun 14, 2024 EPSS Score
- Aug 27, 2024 EPSS Score
- Nov 8, 2024 EPSS Score
- Jan 22, 2025 EPSS Score
- Mar 17, 2025 EPSS Score