CVE-2020-10091

GitLab 9.3 through 12.8.1 allows XSS. A cross-site scripting vulnerability was found when viewing particular file types...

CVE-2020-10091

GitLab 9.3 through 12.8.1 allows XSS. A cross-site scripting vulnerability was found when viewing particular file types...

CVE-2020-10091

Removed by vendor...

CVE-2020-10091

GitLab 9.3–12.8.1 is affected by a cross-site scripting (XSS) vulnerability in the web UI, arising from improper validation of client-side data when viewing certain file types. Impact could include execution of client-side code in the context of a user’s session. Remediation: upgrade to GitLab 12...