CVE-2019-12445
An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute JavaScript code on notes by impor...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute JavaScript code on notes by importing a specially crafted project file. It allows XSS.
参照URL
- advisory about.gitlab.com
- advisory about.gitlab.com