VulnerabilityModified
CVE-2018-10379
The Move Issue feature contained a persistent XSS vulnerability.
MEDIUM 6.1EPSS 0.89%
Does this matter?
Lower severity and a low EPSS score (0.89%). Track it; it rarely justifies an emergency change on its own.
Description
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 10.5.8, 10.6.x before 10.6.5, and 10.7.x before 10.7.2. The Move Issue feature contained a persistent XSS vulnerability.
- CVSS 3.0
- 6.1 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 0.89% probability · 57th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- gitlab/gitlab
- Source
- cve@mitre.org
References
- http://www.securityfocus.com/bid/104491Third Party Advisory, VDB Entry
- https://about.gitlab.com/2018/04/30/security-release-gitlab-10-dot-7-dot-2-released/Release Notes, Vendor Advisory
- http://www.securityfocus.com/bid/104491Third Party Advisory, VDB Entry
- https://about.gitlab.com/2018/04/30/security-release-gitlab-10-dot-7-dot-2-released/Release Notes, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.