CVE-2019-12445
EUVD-2019-405410.03.2020, 15:15
An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute JavaScript code on notes by importing a specially crafted project file. It allows XSS.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 8.4.0 ≤ 𝑥 ≤ 11.11.0 |
| gitlab | gitlab | 8.4.0 ≤ 𝑥 ≤ 11.11.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases