CVE-2017-0923

Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting.

Score

CVSS 3.0 6.1 Medium

Status

Modified - support@hackerone.com

Published

2018-03-21

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Gitlab (Gitlab)
• Gitlab Community And Enterprise Editions (Gitlab)

References

• https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/
• https://hackerone.com/reports/293740