CVE-2018-12607

3.5

LOWCVSS v2

Published

August 3, 2018

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

An issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x before 10.8.5, and 11.x before 11.0.1. The charts feature contained a persistent XSS issue due to a lack of output encoding.

gitlab

NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.

< 10.7.6, >= 10.8.0, < 10.8.5, >= 11.0.0, < 11.0.1NVD

@semantic-release/gitlab

NPMsemantic-release plugin to publish a GitLab release

< 10.7.6, >= 10.8.0, < 10.8.5, >= 11.0.0, < 11.0.1NVD

semantic-release/gitlab

GitHub

More on this CVE

NVD↗GitHub Advisory↗

:fox_face: semantic-release plugin to publish a GitLab release

< 10.7.6, >= 10.8.0, < 10.8.5, >= 11.0.0, < 11.0.1NVD

gitlab

Python Package IndexGet GitLab user Details

< 10.7.6, >= 10.8.0, < 10.8.5, >= 11.0.0, < 11.0.1NVD

gitlab

Crates.ioGitlab API client.

< 10.7.6, >= 10.8.0, < 10.8.5, >= 11.0.0, < 11.0.1NVD

gitlab

RubyGemsRuby client and CLI for GitLab API

< 10.7.6, >= 10.8.0, < 10.8.5, >= 11.0.0, < 11.0.1NVD

NARKOZ/gitlab

GitHubRuby wrapper and CLI for the GitLab REST API

< 10.7.6, >= 10.8.0, < 10.8.5, >= 11.0.0, < 11.0.1NVD

Security Advisories

CVE-2018-12607

Description

More on this CVE