NetSight
medium6.1

CVE-2018-10379

An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 10.5.8, 10.6.x before 10.6.5, and 10.7.x before 10.7.2.

Impact

An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 10.5.8, 10.6.x before 10.6.5, and 10.7.x before 10.7.2. The Move Issue feature contained a persistent XSS vulnerability.

Affected products

VendorProductAffected versions
GitlabGitlab
before 10.5.8
from 10.6.0 before 10.6.5
from 10.7.0 before 10.7.2

Weakness classification

References