CVE-2018-12606: XSS
An issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x before 10.8.5, and 11.x before 11.0.1. The wiki contains a persistent XSS issue due to a lack of output encoding affecting a specific markdown feature.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-12606?
CVE-2018-12606 has been classified as a high severity vulnerability due to its persistent XSS nature.
How do I fix CVE-2018-12606?
To fix CVE-2018-12606, you should upgrade to GitLab version 10.7.6, 10.8.5, or 11.0.1 or later.
What types of GitLab editions are affected by CVE-2018-12606?
Both GitLab Community Edition and Enterprise Edition are affected by CVE-2018-12606 before specific patched versions.
What feature of GitLab is impacted by CVE-2018-12606?
CVE-2018-12606 affects a specific markdown feature in the GitLab wiki due to a lack of output encoding.
Which versions of GitLab contain CVE-2018-12606?
CVE-2018-12606 is present in GitLab versions prior to 10.7.6, 10.8.x before 10.8.5, and 11.x before 11.0.1.