medium6.1
CVE-2017-0924
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting.
Impact
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | from 9.0.0 through 9.5.10 from 10.0.0 through 10.1.5 from 10.2.0 through 10.2.5 from 10.3.0 through 10.3.3 |