Логотип exploitDog
bind:CVE-2019-12445
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2019-12445

Количество 4

Количество 4

ubuntu логотип

CVE-2019-12445

больше 5 лет назад

An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute JavaScript code on notes by importing a specially crafted project file. It allows XSS.

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2019-12445

больше 5 лет назад

An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute JavaScript code on notes by importing a specially crafted project file. It allows XSS.

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2019-12445

больше 5 лет назад

An issue was discovered in GitLab Community and Enterprise Edition 8.4 ...

CVSS3: 5.4
EPSS: Низкий
github логотип

GHSA-wxxw-9mfc-32jr

около 3 лет назад

An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute JavaScript code on notes by importing a specially crafted project file. It allows XSS.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2019-12445

An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute JavaScript code on notes by importing a specially crafted project file. It allows XSS.

CVSS3: 5.4
0%
Низкий
больше 5 лет назад
nvd логотип
CVE-2019-12445

An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute JavaScript code on notes by importing a specially crafted project file. It allows XSS.

CVSS3: 5.4
0%
Низкий
больше 5 лет назад
debian логотип
CVE-2019-12445

An issue was discovered in GitLab Community and Enterprise Edition 8.4 ...

CVSS3: 5.4
0%
Низкий
больше 5 лет назад
github логотип
GHSA-wxxw-9mfc-32jr

An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute JavaScript code on notes by importing a specially crafted project file. It allows XSS.

0%
Низкий
около 3 лет назад

Уязвимостей на страницу