WEB GitLab abstract_reference_filter Stored Cross-Site Scripting -2 (CVE-2023-6371)

Rule ID

1235078

Severity

High

Description

A remote attacker could exploit this vulnerabilities by sending a crafted request to the target server. Successfully exploiting this vulnerability could result in arbitrary code execution in the context of the victim's browser.

Impact

Cross-site scripting

Recommendation

Update vendor's patch.

IPS Category

Web threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A