Vulnerability Database

317,577

Total vulnerabilities in the database

CVE-2024-8186

An issue has been discovered in GitLab CE/EE affecting all versions from 16.6 before 17.7.6, 17.8 before 17.8.4, and 17.9 before 17.9.1. An attacker could inject HMTL into the child item search potentially leading to XSS in certain situations.

  • Published: Mar 3, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-8186
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
gitlab / gitlab 16.6.0 17.7.6
gitlab / gitlab 17.8.0 17.8.4
gitlab / gitlab 17.9.0 17.9.0.x