GitLab 社区和企业版 Project Settings 存储型XSS漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities

• PoCCVE-2026-85706: GitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File Read
• PoCmaven-settings-xml-exposure: Apache Maven settings.xml Credentials - Exposure
• GitLab CE/EE /api/graphql 未授权访问漏洞（CVE-2026-19478）
• PoCCVE-2026-0717: LottieFiles for Gutenberg <= 3.0.0 - Unauthenticated Settings Disclosure
• PoCCVE-2026-19478: GitLab CE/EE - GraphQL @gl_introduced Arbitrary Method Invocation
• 9Router /api/cli-tools/cowork-settings 命令执行漏洞（CVE-2026-63732）
• PoCclaude-settings-exposure: Claude Code Project Settings Exposure
• 9Router /api/cli-tools/cowork-settings 命令执行漏洞（CVE-2026-46339）
• 关于用友GRP-U8Cloud产品getBudgetReleaseProjectList及U8AppProxy及fbpm-modeler存在命令执行漏洞的安全通告
• FOGProject /fog/management/export.php 信息泄露漏洞（CVE-2025-58443）
• PoCCVE-2026-47717: FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure
• PoCCVE-2025-12841: WordPress Bookit < 2.5.1 - Unauthenticated Stripe Settings Update
• TRUfusion Enterprise /trufusionPortal/getProjectList 权限绕过漏洞（CVE-2025-27223）