CVE-2019-5471

An input validation and output encoding issue was discovered in the GitLab email notification feature which could result in a persistent XSS. This was...

Original description

The description as published by the source.

An input validation and output encoding issue was discovered in the GitLab email notification feature which could result in a persistent XSS. This was addressed in GitLab 12.1.2, 12.0.4, and 11.11.6.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory about.gitlab.com
report gitlab.com
report hackerone.com