medium6.1
CVE-2017-0917
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in persistent cross site scripting.
Impact
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in persistent cross site scripting.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | from 10.1.0 through 10.1.5 from 10.2.0 through 10.2.5 from 10.3.0 through 10.3.3 |
| Debian | Debian Linux | Version 9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/
- https://hackerone.com/reports/299525
- https://www.debian.org/security/2018/dsa-4145
- https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/
- https://hackerone.com/reports/299525
- https://www.debian.org/security/2018/dsa-4145