CVE-2018-19493: XSS
An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is a persistent XSS vulnerability in the environment pages due to a lack of input validation and output encoding.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-19493?
CVE-2018-19493 is classified as a high severity vulnerability due to the potential for persistent XSS attacks.
How do I fix CVE-2018-19493?
To fix CVE-2018-19493, upgrade GitLab to version 11.3.11, 11.4.8, or 11.5.1 or later.
What versions of GitLab are affected by CVE-2018-19493?
CVE-2018-19493 affects GitLab Community and Enterprise Editions versions before 11.3.11, 11.4.8, and 11.5.1.
What kind of vulnerability is CVE-2018-19493?
CVE-2018-19493 is a persistent cross-site scripting (XSS) vulnerability due to insufficient input validation and output encoding.
Where can I find more information about CVE-2018-19493?
Additional information about CVE-2018-19493 can typically be found in the GitLab release notes and security advisories.