PT-2020-10131
CVE-2019-19311
·
Published
2020-01-03
·
Updated
2020-01-09
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
GitLab EE versions 8.14 through 12.5
GitLab EE version 12.4.3
GitLab EE version 12.3.6
Description
The issue allows for XSS in group and profile fields.
Recommendations
For GitLab EE versions 8.14 through 12.5, update to a version outside of this range to resolve the issue.
For GitLab EE version 12.4.3, update to a newer version to mitigate the risk.
For GitLab EE version 12.3.6, update to a newer version to mitigate the risk.
Found an issue in the description? Have something to add? Feel free to write us 👾