CVE-2018-18643

GitLab CE & EE 11.2 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 have Persistent XSS.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-04-25

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Gitlab (Gitlab)

References

• https://about.gitlab.com/2018/11/19/critical-security-release-gitlab-11-dot-4-dot-6-released/
• https://about.gitlab.com/blog/categories/releases/
• https://gitlab.com/gitlab-org/gitlab-ce/issues/53385