Cross site scripting

2020-01-2803:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

36.1%

A XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin.

CPENameOperatorVersion
gitlabge12.1.0
gitlablt12.1.10
gitlabge12.1.0
gitlablt12.1.10

Name	Operator	Version
gitlab	ge	12.1.0
gitlab	lt	12.1.10
gitlab	ge	12.1.0
gitlab	lt	12.1.10

References

about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/

hackerone.com/reports/645043

0.001 Low

EPSS

Percentile

36.1%

Related for PRION:CVE-2019-15586