Cross site scripting

2020-03-1317:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

32.1%

GitLab 9.3 through 12.8.1 allows XSS. A cross-site scripting vulnerability was found when viewing particular file types.

CPENameOperatorVersion
gitlabge9.3.0
gitlable12.8.1
gitlabge9.3.0
gitlable12.8.1

Name	Operator	Version
gitlab	ge	9.3.0
gitlab	le	12.8.1
gitlab	ge	9.3.0
gitlab	le	12.8.1

References

about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/

about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/index.html

0.001 Low

EPSS

Percentile

32.1%

Related for PRION:CVE-2020-10091