Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2014-3456 — MEDIUM severity vulnerability | Release Alert

CVE-2014-3456

4.3

MEDIUMCVSS v2

Published

May 13, 2014

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

Cross-site scripting (XSS) vulnerability in GitLab Enterprise Edition (EE) 6.6.0 before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.

= 6.6.1, = 6.6.0NVD

RubyGemsRuby client and CLI for GitLab API

= 6.6.1, = 6.6.0NVD

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Ruby wrapper and CLI for the GitLab REST API

= 6.6.1, = 6.6.0NVD