Skip to content
OpenAdvisories
Unscored CVE-2019-5467 EUVD-2019-15049GHSA-xg29-cfqc-hqpr

An input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages feature which could result in a persistent XSS.…

Published Sep 9, 2019 · Updated Aug 4, 2024 · Assigned by hackerone

Category: Web / CMS

Description

An input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages feature which could result in a persistent XSS. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.

Affected products

VendorProductAffectedFixed
— GitLab CE/EE Affects GitLab CE/EE 11.10 and later. Fixed in 12.1.2, 12.0.4, and 11.11.6 —

References