CVE-2019-5471
An input validation and output encoding issue was discovered in the GitLab email notification feature which could result in a persistent XSS. This was...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An input validation and output encoding issue was discovered in the GitLab email notification feature which could result in a persistent XSS. This was addressed in GitLab 12.1.2, 12.0.4, and 11.11.6.
参照URL
- advisory about.gitlab.com
- report gitlab.com
- report hackerone.com