CVE-2018-17454

2023-04-1523:15:13

CWE-79

[email protected]

web.nvd.nist.gov

cve-2018-17454

gitlab

stored xss

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

27.2%

JSON

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is stored XSS on the issue details screen.

Affected configurations

Nvd

Node

gitlabgitlabRange<11.1.7community

gitlabgitlabRange<11.1.7enterprise

gitlabgitlabRange11.2.0–11.2.4community

gitlabgitlabRange11.2.0–11.2.4enterprise

gitlabgitlabMatch11.3.0community

gitlabgitlabMatch11.3.0enterprise

VendorProductVersionCPE
gitlabgitlab*cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
gitlabgitlab*cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
gitlabgitlab11.3.0cpe:2.3:a:gitlab:gitlab:11.3.0:*:*:*:community:*:*:*
gitlabgitlab11.3.0cpe:2.3:a:gitlab:gitlab:11.3.0:*:*:*:enterprise:*:*:*

Vendor	Product	Version	CPE
gitlab	gitlab	*	cpe:2.3:a:gitlab:gitlab:::::community:::*
gitlab	gitlab	*	cpe:2.3:a:gitlab:gitlab:::::enterprise:::*
gitlab	gitlab	11.3.0	cpe:2.3:a:gitlab:gitlab:11.3.0::::community:::
gitlab	gitlab	11.3.0	cpe:2.3:a:gitlab:gitlab:11.3.0::::enterprise:::