CVE-2019-18454

6.1

MEDIUMCVSS v3

Published

November 26, 2019

CVSS v2

4.3 MEDIUM

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

An issue was discovered in GitLab Community and Enterprise Edition 10.5 through 12.4 in link validation for RDoc wiki pages feature. It has XSS.

NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.

>= 10.5.0, <= 12.4.0NVD

NPMsemantic-release plugin to publish a GitLab release

>= 10.5.0, <= 12.4.0NVD

GitHub

:fox_face: semantic-release plugin to publish a GitLab release

>= 10.5.0, <= 12.4.0NVD

Python Package IndexGet GitLab user Details

>= 10.5.0, <= 12.4.0NVD

Crates.ioGitlab API client.

>= 10.5.0, <= 12.4.0NVD

RubyGemsRuby client and CLI for GitLab API

>= 10.5.0, <= 12.4.0NVD

GitHubRuby wrapper and CLI for the GitLab REST API

>= 10.5.0, <= 12.4.0NVD