CVE-2018-19573

GitLab CE/EE, versions 10.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields…

published July 10, 2019

CVSS
—
EPSS
1%
Percentile
60.9
In the wild
Unconfirmed
What it is

GitLab CE/EE, versions 10.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via Mermaid.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00959 · 60.9th percentile
Published
2019-07-10T15:01Z
EPSS history
Timeline
  • 10 JUL 15:01Z
    GitLab CE/EE, versions 10.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields…
    cvelistv5