VDB
CVE-2024-6530
CVE-2024-6530
PUBLISHED
A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 17.1 prior 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2. When adding a authorizing an application, it can be made to render as HTML under specific circumstances.
EPSS 1.39% · 80.7th percentile
Risk Scores
EPSS Score
1.39%
80.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 17.1.0, 17.3.0, 17.4.0 |
| Bitnami | gitlab | 17.1.0, 17.3.0, 17.4.0 |
Timeline
- Jan 21, 1970 Security Advisory
- Oct 9, 2024 CVE Published
- Oct 11, 2024 EPSS Score
- Oct 14, 2024 Coalition ESS Score
- Oct 17, 2024 Coalition ESS Score
- Oct 30, 2024 EPSS Score
- Nov 18, 2024 EPSS Score
- Dec 7, 2024 EPSS Score
- Dec 26, 2024 EPSS Score
- Jan 14, 2025 EPSS Score
- Feb 2, 2025 EPSS Score
- Feb 21, 2025 EPSS Score