CVE-2024-4201 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Back Back to CVE browser

MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Published Jun 12, 2024

4.4

MEDIUM

CVSS 3.1

EPSS 0.48%

Description

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 16.10.7, all versions starting from 16.11 before 16.111.4, all versions starting from 17.0 before 17.0.2. When viewing an XML file in a repository in raw mode, it can be made to render as HTML if viewed under specific circumstances.

Affected products

Vendor GitLab Product GitLab Default
unaffected
- Version
  16.11
  Status
  affected
  Constraints
  <16.11.4
- Version
  17.0
  Status
  affected
  Constraints
  <17.0.2
- Version
  5.1
  Status
  affected
  Constraints
  <16.10.7

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

GitLab

unaffected

Version	Status	Constraints
16.11	affected	<16.11.4
17.0	affected	<17.0.2
5.1	affected	<16.10.7

Remediation

Vendor solution

Upgrade to versions 16.10.7, 16.11.4, 17.0.2 or above.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

https://about.gitlab.com/releases/2024/06/12/patch-release-gitlab-17-0-2-released/#xss-and-content-injection-when-viewing-raw-xhtml-files-on-ios-devices
Release Notes
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-32755
Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/458229
issue-trackingpermissions-requiredVendor Advisory
https://hackerone.com/reports/2473886
technical-descriptionexploitpermissions-requiredThird Party Advisory

Link	Providers	Tags
https://about.gitlab.com/releases/2024/06/12/patch-release-gitlab-17-0-2-released/#xss-and-content-injection-when-viewing-raw-xhtml-files-on-ios-devices		Release Notes
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-32755		Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/458229		issue-trackingpermissions-requiredVendor Advisory
https://hackerone.com/reports/2473886		technical-descriptionexploitpermissions-requiredThird Party Advisory