CVE-2018-19570

Опубликовано: 10 июл. 2019

Источник: debian

Описание

GitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via unrecognized HTML tags.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
gitlab	fixed	11.3.11+dfsg-1		package

Примечания

https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/

Связанные уязвимости

CVE-2018-19570

CVSS3: 5.4

ubuntu

почти 6 лет назад

GitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via unrecognized HTML tags.

CVE-2018-19570

CVSS3: 5.4

nvd

почти 6 лет назад

GitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via unrecognized HTML tags.

GHSA-3c74-ghrj-c3gp

CVSS3: 5.4

github

около 3 лет назад

GitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via unrecognized HTML tags.