Lucene search

GoogleOSV:CVE-2018-18643

HistoryApr 25, 2019 - 9:29 p.m.

CVE-2018-18643

2019-04-2521:29:00

Google

osv.dev

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.0%

GitLab CE & EE 11.2 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 have Persistent XSS.

CPENameOperatorVersion
gitlabeq11.4.2-ee
gitlabeq11.4.3-ee
gitlabeq11.4.4-ee
gitlabeq11.4.0-ee
gitlabeq11.4.5-ee
gitlabeq11.4.1-ee

Name	Operator	Version
gitlab	eq	11.4.2-ee
gitlab	eq	11.4.3-ee
gitlab	eq	11.4.4-ee
gitlab	eq	11.4.0-ee
gitlab	eq	11.4.5-ee
gitlab	eq	11.4.1-ee

References

about.gitlab.com/2018/11/19/critical-security-release-gitlab-11-dot-4-dot-6-released/

about.gitlab.com/blog/categories/releases/

gitlab.com/gitlab-org/gitlab-ce/issues/53385