{"id":"CVE-2023-2164","published":"2023-08-01T23:36:10Z","modified":"2026-08-14T04:10:24Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","vendor":"GitLab","product":"GitLab","tier":"core","eol":null,"affectedVersions":[{"vendor":"GitLab","product":"GitLab","versions":[">= 15.9, < 16.0.8",">= 16.1.0, < 16.1.3",">= 16.2.0, < 16.2.2"]}],"description":{"text":"An issue has been discovered in GitLab affecting all versions starting from 15.9 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for an attacker to trigger a stored XSS vulnerability via user interaction with a crafted URL in the WebIDE beta.","provenance":"source","from":"CVE.org"},"summary":{"text":"A stored cross-site scripting flaw in the WebIDE beta component of GitLab, affecting versions from 15.9 before 16.0.8, from 16.1 before 16.1.3, and from 16.2 before 16.2.2. An attacker with low privileges can trigger it by getting a user to interact with a crafted URL, requiring no network-level access beyond reaching the GitLab instance.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:38Z"},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.66337,"percentile":0.9928,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":null,"cwes":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation"}],"references":[{"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/407783","tags":["issue-tracking"]},{"url":"https://hackerone.com/reports/1940598","tags":["technical-description","exploit","permissions-required","broken-link"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2023-33681","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-33681","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":["https://hackerone.com/reports/1940598"],"flow":[],"timeline":[{"date":"2023-08-01","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-2164","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":28.6,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.86,"detail":"percentile 0.9928"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":3.78,"detail":"base score 5.4"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}