CVE-2020-7971

2020-02-0516:15:12

Google

osv.dev

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

32.1%

GitLab EE 11.0 and later through 12.7.2 allows XSS.

CPENameOperatorVersion
gitlabeq12.6.4-ee
gitlabeq12.6.1-ee
gitlabeq12.6.2-ee
gitlabeq12.6.0-ee
gitlabeq12.6.3-ee

Name	Operator	Version
gitlab	eq	12.6.4-ee
gitlab	eq	12.6.1-ee
gitlab	eq	12.6.2-ee
gitlab	eq	12.6.0-ee
gitlab	eq	12.6.3-ee

References

about.gitlab.com/blog/categories/releases/

about.gitlab.com/releases/2020/01/30/security-release-gitlab-12-7-4-released/