CVE-2018-20490: XSS
An issue was discovered in GitLab Community and Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-20490?
The severity of CVE-2018-20490 is classified as high due to the potential for XSS attacks.
How do I fix CVE-2018-20490?
To fix CVE-2018-20490, upgrade GitLab to versions 11.4.13, 11.5.6, or 11.6.1 or later.
Which versions of GitLab are affected by CVE-2018-20490?
CVE-2018-20490 affects GitLab Community and Enterprise Editions from 11.2.x to prior to version 11.4.13, as well as 11.5.x before 11.5.6, and 11.6.x before 11.6.1.
What type of vulnerability is CVE-2018-20490?
CVE-2018-20490 is a cross-site scripting (XSS) vulnerability which can allow attackers to inject malicious scripts.
Is it safe to continue using affected versions of GitLab after CVE-2018-20490?
No, it is not safe to use affected versions of GitLab as they are susceptible to XSS attacks, and immediate patching or updating is recommended.