CVE-2018-17536: XSS
Published Apr 15, 2023
·Updated
An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is stored XSS on the merge request page via project import.
Affected Software
6 affected components
GitLab GitLab<11.1.7
GitLab GitLab<11.1.7
GitLab GitLab>=11.2.0<11.2.4
GitLab GitLab>=11.2.0<11.2.4
GitLab GitLab=11.3.0
GitLab GitLab=11.3.0
Event History
Apr 15, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-17536?
CVE-2018-17536 is classified with a high severity due to its potential for stored XSS exploits.
2
How do I fix CVE-2018-17536?
To fix CVE-2018-17536, upgrade GitLab Community or Enterprise Edition to versions 11.1.7, 11.2.4 or later, or 11.3.1 or later.
3
Which GitLab versions are affected by CVE-2018-17536?
CVE-2018-17536 affects GitLab Community and Enterprise Editions prior to 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1.
4
What type of vulnerability is CVE-2018-17536?
CVE-2018-17536 is a stored cross-site scripting (XSS) vulnerability.
5
Where does CVE-2018-17536 occur within GitLab?
CVE-2018-17536 occurs on the merge request page via project import functionality.