NetSight
IP …
medium5.4

CVE-2018-19570

GitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via unrecogni…

Impact

GitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via unrecognized HTML tags.

Affected products

VendorProductAffected versions
GitlabGitlab
from 11.3.0 before 11.3.11
from 11.4.0 before 11.4.8
from 11.5.0 before 11.5.1

Weakness classification

CWE-79

References