Lucene search

K
osvGoogleOSV:CVE-2018-9243
HistoryApr 05, 2018 - 2:29 p.m.

CVE-2018-9243

2018-04-0514:29:00
Google
osv.dev
2

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.0%

GitLab Community and Enterprise Editions version 8.4 up to 10.4 are vulnerable to XSS because a lack of input validation in the merge request component leads to cross site scripting (specifically, filenames in changes tabs of merge requests). This is fixed in 10.6.3, 10.5.7, and 10.4.7.

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.0%