4.7

CVE-2026-3093: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Analyzed
AliasesCGA-299w-wfcp-m7v5CGA-2vgq-hpx8-9892CGA-3gq6-q64x-frhj
Published 29-07-2026Last modified 29-07-2026
Some data may be incomplete
  • 1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2026-3093 is a medium (CVSS 4.7) vulnerability in gitlab. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 21.1% of scored vulnerabilities. 1 public exploit is recorded.

Priority
Routine

Not severe (CVSS 4.7, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
4.7/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.29%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 0 · Related 1
CGA-48X9-F9MG-3G2G

Timeline

  1. 29-07-2026
    PublishedVulnerability first disclosed.
  2. 29-07-2026
    Last modifiedVulnerability information updated.

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker to execute arbitrary JavaScript in another user's browser via a crafted URL, due to improper sanitization of user-controlled input.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.29%

Chance of exploitation in the next 30 days

Percentile

21%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.29% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (hackerone.com)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.

Chainguard122 products
  • gitaly-config-18.11< 18.11.7-r0
  • gitlab-base-18.11< 18.11.7-r0
  • gitlab-base-fips-18.11< 18.11.7-r5
  • gitlab-certificates-18.11< 18.11.7-r0
  • gitlab-cfssl-self-sign-scripts-18.11< 18.11.7-r0
Wolfi18 products
  • gitlab-docker-machine-18.11< 18.11.4-r2
  • gitlab-docker-machine-19.0< 19.0.3-r0
  • gitlab-docker-machine-19.1< 19.1.2-r1
  • gitlab-runner-18.11< 18.11.4-r2
  • gitlab-runner-19.0< 19.0.3-r0
Gitlab1 product
  • gitlabEOL≥ 14.0, < 19.0.5 | ≥ 19.1, < 19.1.3 | ≥ 19.2, < 19.2.1 | ≥ 14.0.0, < 19.0.5 | ≥ 19.1.0, < 19.1.3 | 19.2.0

3 vendors · 141 products

References

5 links