CVE-2020-10078
GitLab 12.1 through 12.8.1 allows XSS. The merge request submission form was determined to have a stored cross-site scripting vulnerability.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
GitLab 12.1 through 12.8.1 allows XSS. The merge request submission form was determined to have a stored cross-site scripting vulnerability.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"12.1.0"},{"fixed":"12.8.2"}]}]
Références
- advisory about.gitlab.com
- advisory about.gitlab.com
- web nvd.nist.gov