PT-2020-10131
CVE-2019-19311
·
تاريخ النشر
2020-01-03
·
تاريخ التحديث
2020-01-09
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
GitLab EE versions 8.14 through 12.5
GitLab EE version 12.4.3
GitLab EE version 12.3.6
Description
The issue allows for XSS in group and profile fields.
Recommendations
For GitLab EE versions 8.14 through 12.5, update to a version outside of this range to resolve the issue.
For GitLab EE version 12.4.3, update to a newer version to mitigate the risk.
For GitLab EE version 12.3.6, update to a newer version to mitigate the risk.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾