CVE-2018-9243
05.04.2018, 14:29
GitLab Community and Enterprise Editions version 8.4 up to 10.4 are vulnerable to XSS because a lack of input validation in the merge request component leads to cross site scripting (specifically, filenames in changes tabs of merge requests). This is fixed in 10.6.3, 10.5.7, and 10.4.7.
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 8.4 ≤ 𝑥 < 10.4.7 |
| gitlab | gitlab | 8.4 ≤ 𝑥 < 10.4.7 |
| gitlab | gitlab | 10.5.0 ≤ 𝑥 < 10.5.7 |
| gitlab | gitlab | 10.5.0 ≤ 𝑥 < 10.5.7 |
| gitlab | gitlab | 10.6.0 ≤ 𝑥 < 10.6.3 |
| gitlab | gitlab | 10.6.0 ≤ 𝑥 < 10.6.3 |
𝑥
= Vulnerable software versions
Ubuntu Releases