CVE-2018-9244

GitLab CE/EE 9.2–10.4 are vulnerable to XSS due to lack of input validation in the milestones component (data-milestone-id in the milestone dropdown). Root cause: improper validation in milestones rendering leads to cross-site scripting. Impact: user-visible XSS risk. Remediation: upgrade to fixe...