Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-4901

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, where a stored XSS vulnerability could be imported from a project with malicious commit notes.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.7%
CVSS Severity
CVSS v3 Score 8.7
Products affected by CVE-2024-4901
  • Gitlab » Gitlab » Version: 16.10.0
    cpe:2.3:a:gitlab:gitlab:16.10.0
  • Gitlab » Gitlab » Version: 16.10.1
    cpe:2.3:a:gitlab:gitlab:16.10.1
  • Gitlab » Gitlab » Version: 16.10.10
    cpe:2.3:a:gitlab:gitlab:16.10.10
  • Gitlab » Gitlab » Version: 16.10.2
    cpe:2.3:a:gitlab:gitlab:16.10.2
  • Gitlab » Gitlab » Version: 16.10.3
    cpe:2.3:a:gitlab:gitlab:16.10.3
  • Gitlab » Gitlab » Version: 16.10.4
    cpe:2.3:a:gitlab:gitlab:16.10.4
  • Gitlab » Gitlab » Version: 16.10.5
    cpe:2.3:a:gitlab:gitlab:16.10.5
  • Gitlab » Gitlab » Version: 16.10.6
    cpe:2.3:a:gitlab:gitlab:16.10.6
  • Gitlab » Gitlab » Version: 16.10.7
    cpe:2.3:a:gitlab:gitlab:16.10.7
  • Gitlab » Gitlab » Version: 16.10.8
    cpe:2.3:a:gitlab:gitlab:16.10.8
  • Gitlab » Gitlab » Version: 16.10.9
    cpe:2.3:a:gitlab:gitlab:16.10.9
  • Gitlab » Gitlab » Version: 16.11.0
    cpe:2.3:a:gitlab:gitlab:16.11.0
  • Gitlab » Gitlab » Version: 16.11.1
    cpe:2.3:a:gitlab:gitlab:16.11.1
  • Gitlab » Gitlab » Version: 16.11.2
    cpe:2.3:a:gitlab:gitlab:16.11.2
  • Gitlab » Gitlab » Version: 16.11.3
    cpe:2.3:a:gitlab:gitlab:16.11.3
  • Gitlab » Gitlab » Version: 16.11.4
    cpe:2.3:a:gitlab:gitlab:16.11.4
  • Gitlab » Gitlab » Version: 16.9.0
    cpe:2.3:a:gitlab:gitlab:16.9.0
  • Gitlab » Gitlab » Version: 16.9.1
    cpe:2.3:a:gitlab:gitlab:16.9.1
  • Gitlab » Gitlab » Version: 16.9.10
    cpe:2.3:a:gitlab:gitlab:16.9.10
  • Gitlab » Gitlab » Version: 16.9.11
    cpe:2.3:a:gitlab:gitlab:16.9.11
  • Gitlab » Gitlab » Version: 16.9.2
    cpe:2.3:a:gitlab:gitlab:16.9.2
  • Gitlab » Gitlab » Version: 16.9.3
    cpe:2.3:a:gitlab:gitlab:16.9.3
  • Gitlab » Gitlab » Version: 16.9.4
    cpe:2.3:a:gitlab:gitlab:16.9.4
  • Gitlab » Gitlab » Version: 16.9.5
    cpe:2.3:a:gitlab:gitlab:16.9.5
  • Gitlab » Gitlab » Version: 16.9.6
    cpe:2.3:a:gitlab:gitlab:16.9.6
  • Gitlab » Gitlab » Version: 16.9.7
    cpe:2.3:a:gitlab:gitlab:16.9.7
  • Gitlab » Gitlab » Version: 16.9.8
    cpe:2.3:a:gitlab:gitlab:16.9.8
  • Gitlab » Gitlab » Version: 16.9.9
    cpe:2.3:a:gitlab:gitlab:16.9.9
  • Gitlab » Gitlab » Version: 17.0.0
    cpe:2.3:a:gitlab:gitlab:17.0.0
  • Gitlab » Gitlab » Version: 17.0.1
    cpe:2.3:a:gitlab:gitlab:17.0.1
  • Gitlab » Gitlab » Version: 17.0.2
    cpe:2.3:a:gitlab:gitlab:17.0.2
  • Gitlab » Gitlab » Version: 17.1.0
    cpe:2.3:a:gitlab:gitlab:17.1.0


Contact Us

Shodan ® - All rights reserved