NetSight
medium4.8

CVE-2020-12276

GitLab 9.5.9 through 12.9 is vulnerable to stored XSS in an admin notification feature.

Impact

GitLab 9.5.9 through 12.9 is vulnerable to stored XSS in an admin notification feature.

Affected products

VendorProductAffected versions
GitlabGitlab
from 9.5.9 before 12.7.8
from 12.8.0 before 12.8.8
from 12.9.0 before 12.9.1

Weakness classification

References