CVE-2018-9243

GitLab Community and Enterprise Editions version 8.4 up to 10.4 are vulnerable to XSS because a lack of input validation in the merge request component leads…

published April 5, 2018

CVSS
—
EPSS
1%
Percentile
61.7
In the wild
Unconfirmed
What it is

GitLab Community and Enterprise Editions version 8.4 up to 10.4 are vulnerable to XSS because a lack of input validation in the merge request component leads to cross site scripting (specifically, filenames in changes tabs of merge requests). This is fixed in 10.6.3, 10.5.7, and 10.4.7.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00983 · 61.7th percentile
Published
2018-04-05T14:00Z
EPSS history
Timeline
  • 05 APR 14:00Z
    GitLab Community and Enterprise Editions version 8.4 up to 10.4 are vulnerable to XSS because a lack of input validation in the merge request component leads…
    cvelistv5