CVE-2018-18642: XSS
Published Dec 4, 2018
·Updated
An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has XSS.
Affected Software
6 affected components
GitLab GitLab>=10.4.0<11.2.7
GitLab GitLab>=10.4.0<11.2.7
GitLab GitLab>=11.3.0<11.3.8
GitLab GitLab>=11.3.0<11.3.8
GitLab GitLab>=11.4.0<11.4.3
GitLab GitLab>=11.4.0<11.4.3
Event History
Dec 4, 2018
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-18642?
CVE-2018-18642 has a medium severity due to the potential for XSS attacks.
2
How do I fix CVE-2018-18642?
To fix CVE-2018-18642, update GitLab to version 11.2.7 or later for 11.2.x, 11.3.8 or later for 11.3.x, or 11.4.3 or later for 11.4.x.
3
Who is affected by CVE-2018-18642?
CVE-2018-18642 affects GitLab Community and Enterprise Editions prior to specified versions.
4
What types of attacks can CVE-2018-18642 allow?
CVE-2018-18642 allows attackers to execute XSS (Cross-Site Scripting) by injecting malicious scripts.
5
When was CVE-2018-18642 disclosed?
CVE-2018-18642 was disclosed in October 2018, with patches released shortly after.