{"schema":"vulnpedia.research/1","cve":"CVE-2024-8648","references":[{"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/486220","tags":["issue-tracking","permissions-required","Broken Link"],"source":"mitre","sourceId":"GitLab","modified":"2024-11-14T13:02:08.724Z","origins":[{"source":"mitre","sourceId":"GitLab","modified":"2024-11-14T13:02:08.724Z","url":"https://gitlab.com/gitlab-org/gitlab/-/issues/486220"},{"source":"nvd","sourceId":"CVE-2024-8648","modified":"2026-06-17T08:23:02.957","url":"https://gitlab.com/gitlab-org/gitlab/-/issues/486220"}]},{"url":"https://hackerone.com/reports/2683863","tags":["technical-description","exploit","permissions-required","Permissions Required"],"source":"mitre","sourceId":"GitLab","modified":"2024-11-14T13:02:08.724Z","origins":[{"source":"mitre","sourceId":"GitLab","modified":"2024-11-14T13:02:08.724Z","url":"https://hackerone.com/reports/2683863"},{"source":"nvd","sourceId":"CVE-2024-8648","modified":"2026-06-17T08:23:02.957","url":"https://hackerone.com/reports/2683863"}]},{"url":"https://about.gitlab.com/releases/2024/11/13/patch-release-gitlab-17-5-2-released/#stored-xss-through-javascript-url-in-analytics-dashboards","tags":["Vendor Advisory"],"source":"mitre","sourceId":"GitLab","modified":"2024-11-14T13:02:08.724Z","origins":[{"source":"mitre","sourceId":"GitLab","modified":"2024-11-14T13:02:08.724Z","url":"https://about.gitlab.com/releases/2024/11/13/patch-release-gitlab-17-5-2-released/#stored-xss-through-javascript-url-in-analytics-dashboards"},{"source":"nvd","sourceId":"CVE-2024-8648","modified":"2026-06-17T08:23:02.957","url":"https://about.gitlab.com/releases/2024/11/13/patch-release-gitlab-17-5-2-released/#stored-xss-through-javascript-url-in-analytics-dashboards"}]},{"source":"euvd","sourceId":"EUVD-2024-49323","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-49323","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2024-49323","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-49323"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}