VDB
CVE-2023-2164
CVE-2023-2164
PUBLISHED
CVSS 5.400000095367432 MEDIUM
An issue has been discovered in GitLab affecting all versions starting from 15.9 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for an attacker to trigger a stored XSS vulnerability via user interaction with a crafted URL in the WebIDE beta.
EPSS 64.97% · 99.2th percentile
Risk Scores
CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS Score
64.97%
99.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 16.1.0, 16.2.0, 15.9.0 |
| Bitnami | gitlab | 15.9.0, 16.1.0, 16.2.0 |
Timeline
- Aug 1, 2023 CVE Published
- Aug 2, 2023 EPSS Score
- Nov 21, 2024 CVE Updated
- Mar 17, 2025 EPSS Score
- Mar 19, 2025 EPSS Score
- Mar 27, 2025 EPSS Score
- Mar 28, 2025 EPSS Score
- Mar 30, 2025 EPSS Score
- Apr 1, 2025 EPSS Score
- Apr 2, 2025 EPSS Score
- Apr 14, 2025 EPSS Score
- May 1, 2025 EPSS Score