CVE-2019-5471

An input validation and output encoding issue was discovered in the GitLab email notification feature which could result in a persistent XSS. This was...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An input validation and output encoding issue was discovered in the GitLab email notification feature which could result in a persistent XSS. This was addressed in GitLab 12.1.2, 12.0.4, and 11.11.6.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory about.gitlab.com
report gitlab.com
report hackerone.com