PT-2019-10088

CVE-2018-20496

·

Publicado

2019-12-30

·

Atualizado

2020-01-07

Descrição por

CVSS 3.1
5.4
Média
MétricasAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: GitLab Community and Enterprise Edition versions 11.2.x through 11.4.x before 11.4.13 GitLab Community and Enterprise Edition versions 11.5.x before 11.5.6 GitLab Community and Enterprise Edition versions 11.6.x before 11.6.1
Description: An issue allows XSS.
Recommendations: For versions 11.2.x through 11.4.x before 11.4.13, update to version 11.4.13 or later. For versions 11.5.x before 11.5.6, update to version 11.5.6 or later. For versions 11.6.x before 11.6.1, update to version 11.6.1 or later.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Identificadores relacionados
CVE-2018-20496
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com