Lucene search
HistoryApr 15, 2023 - 11:15 p.m.
CVE-2018-17454
gitlab
security
vulnerability
xss
stored xss
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
4.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
27.2%
An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is stored XSS on the issue details screen.
Affected configurations
Node
gitlabgitlabRange<11.1.7community
ORgitlabgitlabRange<11.1.7enterprise
ORgitlabgitlabRange11.2.0–11.2.4community
ORgitlabgitlabRange11.2.0–11.2.4enterprise
ORgitlabgitlabMatch11.3.0community
ORgitlabgitlabMatch11.3.0enterprise
| CPE | Name | Operator | Version |
|---|---|---|---|
| gitlab:gitlab | gitlab | lt | 11.1.7 |
| gitlab:gitlab | gitlab | lt | 11.2.4 |
| gitlab:gitlab | gitlab | eq | 11.3.0 |
Related
osv
osv
CVE-2018-17454
2023-04-15 23:15:13
nvd
nvd
CVE-2018-17454
2023-04-15 23:15:13
ubuntucve
ubuntucve
CVE-2018-17454
2023-04-15 00:00:00
debiancve
debiancve
CVE-2018-17454
2023-04-15 23:15:13
prion
prion
Cross site scripting
2023-04-15 23:15:00
cvelist
cvelist
CVE-2018-17454
2023-04-15 00:00:00
freebsd
freebsd
Gitlab -- multiple vulnerabilities
2018-10-01 00:00:00
nessus
nessus
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
4.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
27.2%
Related for CVE-2018-17454