CVE-2018-9243

CVE-2018-9243 affects GitLab Community and Enterprise Editions from 8.4 up to 10.4. The vulnerability arises from a lack of input validation in the merge request component, enabling cross-site scripting via filenames shown in the changes tab. A fix is available in 10.6.3, 10.5.7, and 10.4.7 (per ...