CVE-2019-15586 - A XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin

Back Back to CVE browser

MEDIUM

A XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin

Published Jan 28, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 0.76%

Description

A XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin.

Affected products

Vendor GitLab Product Gitlab CE/EE Default
n/a
- Version
  before 12.1.10
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

GitLab

Gitlab CE/EE

n/a

Version	Status	Constraints
before 12.1.10	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/
x_refsource_MISCVendor Advisory
https://hackerone.com/reports/645043
x_refsource_MISCPermissions Required

Link	Providers	Tags
https://about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/		x_refsource_MISCVendor Advisory
https://hackerone.com/reports/645043		x_refsource_MISCPermissions Required

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner hackerone

Published Jan 28, 2020

Updated Aug 5, 2024

Reserved Aug 26, 2019

Link CVE-2019-15586

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-15586

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-15586