CVE-2017-0923

CVE-2017-0923

Vendor Gitlab
Product GitLab Community and Enterprise Editions
Weakness CWE-79 · XSS
Published March 21, 2018
Last update August 5, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting.

Key dates

02Disclosure timeline

March 21, 2018 CVE published
August 5, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-21483 listmonk Vulnerable to Stored XSS Leading to Admin Account Takeover CVE-2023-23982 WordPress WPFrom Email Plugin <= 1.8.8 is vulnerable to Cross Site Scripting (XSS) CVE-2026-42762 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability CVE-2022-0501 Cross-site Scripting (XSS) - Reflected in ptrofimov/beanstalk_console CVE-2026-24623 WordPress Neoforum plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability