Detections
Analytics
CVE-2024-10240
medium
Description
Gitlab reports: Unauthorized access to Kubernetes cluster agent Device OAuth flow allows for cross window forgery Denial of Service by importing malicious crafted FogBugz import payload Stored XSS through javascript URL in Analytics dashboards HTML injection in vulnerability Code flow could lead to XSS on self hosted instances Information disclosure through an API endpoint