NetSight
high8.7

CVE-2023-6033

Improper neutralization of input in Jira integration configuration in GitLab CE/EE, affecting all versions from 15.10 prior to 16.6.1, 16.5 prior to 16.5.3, an…

Impact

Improper neutralization of input in Jira integration configuration in GitLab CE/EE, affecting all versions from 15.10 prior to 16.6.1, 16.5 prior to 16.5.3, and 16.4 prior to 16.4.3 allows attacker to execute javascript in victim's browser.

Affected products

VendorProductAffected versions
GitlabGitlab
from 15.10 before 16.6.1
from 16.4.0 before 16.4.3
from 16.5.0 before 16.5.3

Weakness classification

References