CVE-2018-19570 - GitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via unrecognized HTML tags

Back Back to CVE browser

MEDIUM

GitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via unrecognized HTML tags

Published Jul 10, 2019

5.4

MEDIUM

CVSS 3.1

EPSS 0.98%

Description

GitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via unrecognized HTML tags.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

http://www.securityfocus.com/bid/109169
vdb-entryx_refsource_BIDBroken LinkThird Party AdvisoryVDB Entry
https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/
x_refsource_CONFIRMBroken LinkRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-11259
Advisory
https://gitlab.com/gitlab-org/gitlab-ce/issues/52392
x_refsource_MISCIssue TrackingVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/109169		vdb-entryx_refsource_BIDBroken LinkThird Party AdvisoryVDB Entry
https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/		x_refsource_CONFIRMBroken LinkRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-11259		Advisory
https://gitlab.com/gitlab-org/gitlab-ce/issues/52392		x_refsource_MISCIssue TrackingVendor Advisory