NetSight
medium6.1

CVE-2017-0923

Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting.

Impact

Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting.

Affected products

VendorProductAffected versions
GitlabGitlab
Versions 9.5.10, 10.1.5, 10.2.5, 10.3.3

Weakness classification

References