Threats tagged 'bit-gitlab-2024-4901'

A stored cross-site scripting (XSS) vulnerability exists in GitLab Community and Enterprise Editions. The flaw affects versions from 16.9 up to but not including 16.11.5, 17.0 up to but not including 17.0.3, and 17.1 up to but not including 17.1.1. The vulnerability arises when malicious commit notes are imported into a project, allowing injection of malicious scripts during web page generation.