CVE-2017-8778
Published May 4, 2017
Last updated 7 years ago
Overview
- Description
- GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element in an issue attachment or avatar that is an SVG document.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 6.1
- Impact score
- 2.7
- Exploitability score
- 2.8
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "889A91B5-A5DF-4D15-80DD-8BC66A9AF272",
"versionEndIncluding": "8.14.9"
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:8.15.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50E67A7C-962E-49EE-8B4C-86D764770EDE"
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:8.15.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CE48CAF-F691-4409-96F9-CBB3903D251D"
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:8.15.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2B07763-013A-48EE-AFB7-3CBB3DFAD60C"
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:8.15.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0BDE7E4A-12A3-46A6-AE35-075247CF1226"
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:8.15.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F3C2EAC-68C0-4444-A366-238A54A96484"
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:8.15.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42C1AA52-622D-4867-AB95-C64DDC185454"
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:8.16.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A1965736-D73F-44DC-BA29-D992CCEA9657"
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:8.16.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E274B52-360B-4F06-B307-89C6D044E444"
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:8.16.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02F132ED-1CC0-4A58-988F-B61D69FEB99E"
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:8.16.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9663040-C06C-4C11-9384-6DE1DE64A8C6"
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:8.16.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D20B405B-38EB-4F10-AAE3-700EBB5F5E02"
}
],
"operator": "OR"
}
]
}
]