漏洞描述 GitLab Community and Enterprise Edition中存在存储型XSS漏洞。此漏洞是由于vscode-mediator-commands package的设计缺陷所导致的。
相关漏洞推荐 gitlab-api-user-enum: GitLab - User Information Disclosure Via Open API POC CVE-2024-45409: GitLab - SAML Authentication Bypass POC CVE-2025-25291: GitLab - SAML Authentication Bypass POC CVE-2019-6793: GitLab Enterprise Edition - Server-Side Request Forgery POC CVE-2020-2096: Jenkins Gitlab Hook <=1.4.2 - Cross-Site Scripting POC CVE-2020-26413: Gitlab CE/EE 13.4 - 13.6.2 - Information Disclosure POC CVE-2021-22205: GitLab CE/EE - Remote Code Execution POC CVE-2021-22214: Gitlab CE/EE 10.5 - Server-Side Request Forgery POC CVE-2021-4191: GitLab GraphQL API User Enumeration POC CVE-2022-0735: GitLab CE/EE - Information Disclosure POC CVE-2022-1162: GitLab CE/EE - Hard-Coded Credentials POC CVE-2022-2185: GitLab CE/EE - Remote Code Execution POC CVE-2023-2825: GitLab 16.0.0 - Path Traversal