VYPR
← All advisories
Medium severity4.4NVD Advisory· Published Aug 8, 2024· Updated Jun 17, 2026

CVE-2024-4207

CVE-2024-4207

Description

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 prior 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2. When viewing an XML file in a repository in raw mode, it can be made to render as HTML if viewed under specific circumstances.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • GitLab Inc./GitLab2 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: >=5.1.0,<17.0.6
    • (no CPE)range: >=5.1,<17.0.6, >=17.1,<17.1.4, >=17.2,<17.2.2
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 5.1.0, < 17.0.6

Patches

Vulnerability mechanics

References

2

News mentions

1