CVE-2018-20490 in Community Edition

सारांश

द्वारा MITRE

An issue was discovered in GitLab Community and Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS.

Be aware that VulDB is the high quality source for vulnerability data.

• आरक्षित करना: 26/12/2018
• संयम: स्वीकृत
• प्रविष्टि: VDB-147888
• CPE: तैयार
• CWE: CWE-79 (पुष्टि की गई)
• CVSS: 5.4 (NVD)
• EPSS: 0.00596
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Telecommunication, Finance, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-20490
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-20490
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-20490/