VULNERABILITY INTELLIGENCE

CVE-2024-7047

CVSS score7.7 HIGH
EPSS probability0.34%
CISA KEVNot currently listed
Published2024-07-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N

Description

A cross site scripting vulnerability exists in GitLab CE/EE affecting all versions from 16.6 prior to 17.0.5, 17.1 prior to 17.1.3, 17.2 prior to 17.2.1 allowing an attacker to execute arbitrary scripts under the context of the current logged in user.

Weakness classification

  • cve@gitlab.com: CWE-79
  • nvd@nist.gov: CWE-79

Primary references