CVE-2024-7047

CVSS V2 None CVSS V3 None

Description

A cross site scripting vulnerability exists in GitLab CE/EE affecting all versions from 16.6 prior to 17.0.5, 17.1 prior to 17.1.3, 17.2 prior to 17.2.1 allowing an attacker to execute arbitrary scripts under the context of the current logged in user.

Overview

CVE ID
CVE-2024-7047

Assigner
GitLab

Vulnerability Status
PUBLISHED

Published Version
2024-07-25T00:30:40.657Z

Last Modified Date
2024-07-25T00:30:40.657Z

Weakness Enumerations

CWE	URL
CWE-79	http://cwe.mitre.org/data/definitions/79.html

References

Reference URL	Reference Tags
https://gitlab.com/gitlab-org/gitlab/-/issues/455318	issue-tracking permissions-required

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-7047
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7047

History

Created	Old Value	New Value	Data Type	Notes
2024-07-25 13:03:53				Added to TrackCVE