CVE-2017-0924
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting.
参照URL
- advisory about.gitlab.com
- report hackerone.com