CVE-2019-15586

2020-01-2803:15:10

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.1%

JSON

A XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin.

CPENameOperatorVersion
gitlabeq12.1.9-ee
gitlabeq12.1.4-ee
gitlabeq12.1.8-ee
gitlabeq12.1.3-ee
gitlabeq12.1.0-ee
gitlabeq12.1.6-ee
gitlabeq12.1.2-ee
gitlabeq12.1.1-ee

Name	Operator	Version
gitlab	eq	12.1.9-ee
gitlab	eq	12.1.4-ee
gitlab	eq	12.1.8-ee
gitlab	eq	12.1.3-ee
gitlab	eq	12.1.0-ee
gitlab	eq	12.1.6-ee
gitlab	eq	12.1.2-ee
gitlab	eq	12.1.1-ee

References

about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/

hackerone.com/reports/645043