CVE-2018-9244
05.04.2018, 14:29
GitLab Community and Enterprise Editions version 9.2 up to 10.4 are vulnerable to XSS because a lack of input validation in the milestones component leads to cross site scripting (specifically, data-milestone-id in the milestone dropdown feature). This is fixed in 10.6.3, 10.5.7, and 10.4.7.
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 9.2 ≤ 𝑥 < 10.4.7 |
| gitlab | gitlab | 9.2 ≤ 𝑥 < 10.4.7 |
| gitlab | gitlab | 10.5.0 ≤ 𝑥 < 10.5.7 |
| gitlab | gitlab | 10.5.0 ≤ 𝑥 < 10.5.7 |
| gitlab | gitlab | 10.6.0 ≤ 𝑥 < 10.6.3 |
| gitlab | gitlab | 10.6.0 ≤ 𝑥 < 10.6.3 |
𝑥
= Vulnerable software versions
Ubuntu Releases