CVE-2018-17454: XSS
Published Apr 15, 2023
·Updated
An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is stored XSS on the issue details screen.
Affected Software
6 affected components
GitLab GitLab<11.1.7
GitLab GitLab<11.1.7
GitLab GitLab>=11.2.0<11.2.4
GitLab GitLab>=11.2.0<11.2.4
GitLab GitLab=11.3.0
GitLab GitLab=11.3.0
Event History
Apr 15, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-17454?
The severity of CVE-2018-17454 is classified as medium due to the stored XSS vulnerability impacting user interactions.
2
How do I fix CVE-2018-17454?
To fix CVE-2018-17454, upgrade GitLab to version 11.1.7 or later, or to 11.2.4 or later, or to 11.3.1 or later.
3
What software versions are affected by CVE-2018-17454?
CVE-2018-17454 affects GitLab Community and Enterprise Editions before versions 11.1.7, 11.2.4, and 11.3.1.
4
What type of vulnerability is CVE-2018-17454?
CVE-2018-17454 is a stored cross-site scripting (XSS) vulnerability.
5
Where does CVE-2018-17454 impact GitLab?
CVE-2018-17454 impacts the issue details screen within GitLab.