Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-9243
HistoryApr 05, 2018 - 2:29 p.m.

Cross site scripting

2018-04-0514:29:00
PRIOn knowledge base
www.prio-n.com
2

0.001 Low

EPSS

Percentile

40.0%

GitLab Community and Enterprise Editions version 8.4 up to 10.4 are vulnerable to XSS because a lack of input validation in the merge request component leads to cross site scripting (specifically, filenames in changes tabs of merge requests). This is fixed in 10.6.3, 10.5.7, and 10.4.7.

0.001 Low

EPSS

Percentile

40.0%