CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

NVD•added 2023/04/16 12:15 a.m.•22 views

CVE-2018-17537

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. blog-viewer has stored XSS during repository browsing, if package.json exists...

5.4CVSS5AI score0.00402EPSS

Exploits0References2

OSV•added 2023/04/16 12:15 a.m.•16 views

CVE-2018-17537

5.4CVSS5.2AI score

Exploits0References2

Vulnrichment•added 2023/04/15 12:0 a.m.•6 views

CVE-2018-17537

5.1AI score0.00402EPSS

Exploits0References2

CVE•added 2023/04/15 12:0 a.m.•274 views

CVE-2018-17537

CVE-2018-17537 affects GitLab Community and Enterprise Edition prior to 11.1.7, 11.2.x prior to 11.2.4, and 11.3.x prior to 11.3.1. The issue is a stored cross-site scripting (XSS) in the blog-viewer during repository browsing when a package.json exists. Root cause is not elaborated beyond the st...

5.4CVSS4.9AI score0.00402EPSS

Exploits0References2Affected Software1