Lucene search

K
cvelistMitreCVELIST:CVE-2018-12605
HistoryAug 03, 2018 - 6:00 p.m.

CVE-2018-12605

2018-08-0318:00:00
mitre
www.cve.org

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.0%

An issue was discovered in GitLab Community Edition and Enterprise Edition 10.7.x before 10.7.6. The usage of ‘url_for’ contained a XSS issue due to it allowing arbitrary protocols as a parameter.

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.0%