CVE-2018-20496

An issue was discovered in GitLab Community and Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS...

CVE-2018-20496

GitLab CE/EE (11.2.x–11.4.x before 11.4.13, 11.5.x before 11.5.6, 11.6.x before 11.6.1) contains a cross-site scripting (XSS) vulnerability due to insufficient validation of client-side data in the web application. This allows an attacker to execute client-side code. Remediation is available in f...