CVE-2023-0523

MEDIUM

GitLab 15.6-15.7.6 15.9-15.9.3 15.10 - Cross-Site Scripting via Malicious Email Address

Title source: llm
STIX 2.1

Description

An issue has been discovered in GitLab affecting all versions starting from 15.6 before 15.8.5, 15.9 before 15.9.4, and 15.10 before 15.10.1. An XSS was possible via a malicious email address for certain instances.

References (3)

Core 3

Scores

CVSS v3 5.4
EPSS 0.2189
EPSS Percentile 95.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (2)
gitlab/gitlab 15.10.0 (2 CPE variants)
gitlab/gitlab 15.6.0 - 15.8.5 (2 CPE variants)
Published Apr 05, 2023
Tracked Since Feb 18, 2026