CVE-2019-15739

An issue was discovered in GitLab Community and Enterprise Edition 8.1 through 12.2.1. Certain areas displaying Markdown were not properly sanitizing some XSS payloads.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-09-16

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Gitlab (Gitlab)

References

• https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/
• https://gitlab.com/gitlab-org/gitlab-ce/issues/64033