CVE-2018-17454

Опубликовано: 15 апр. 2023

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is stored XSS on the issue details screen.

Ссылки

https://about.gitlab.com/blog/categories/releases/
Release Notes
https://about.gitlab.com/releases/2018/10/01/security-release-gitlab-11-dot-3-dot-1-released/
Release Notes
Vendor Advisory
https://about.gitlab.com/blog/categories/releases/
Release Notes
https://about.gitlab.com/releases/2018/10/01/security-release-gitlab-11-dot-3-dot-1-released/
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*

Версия до 11.1.7 (исключая)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Версия до 11.1.7 (исключая)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*

Версия от 11.2.0 (включая) до 11.2.4 (исключая)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Версия от 11.2.0 (включая) до 11.2.4 (исключая)

cpe:2.3:a:gitlab:gitlab:11.3.0:*:*:*:community:*:*:*

cpe:2.3:a:gitlab:gitlab:11.3.0:*:*:*:enterprise:*:*:*

EPSS

Процентиль: 41%

0.0019

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVE-2018-17454

CVSS3: 5.4

ubuntu

около 2 лет назад

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is stored XSS on the issue details screen.

CVE-2018-17454

CVSS3: 5.4

debian

около 2 лет назад

An issue was discovered in GitLab Community and Enterprise Edition bef ...

GHSA-23rp-cxj2-cgcm

CVSS3: 5.4

github

около 2 лет назад

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is stored XSS on the issue details screen.

EPSS

Процентиль: 41%

0.0019

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79