VDB

CVE-2018-10379

CVE-2018-10379 PUBLISHED CVSS 6.099999904632568 MEDIUM

An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 10.5.8, 10.6.x before 10.6.5, and 10.7.x before 10.7.2. The Move Issue feature contained a persistent XSS vulnerability.

EPSS 0.86% · 58.1th percentile

Risk Scores

CVSS 3.0
6.099999904632568
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.86%
58.1th percentile

Affected Products

VendorProductVersions
gitlabgitlab0, 10.6.0, 10.7.0
n/an/a*

Timeline

  • CVE Published
  • Jul 16, 2018 PoC Published
  • Jul 16, 2018 PoC Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 26, 2021 EPSS Score
  • Oct 28, 2021 EPSS Score
  • Dec 31, 2021 EPSS Score
  • Mar 4, 2022 EPSS Score
  • May 7, 2022 EPSS Score
  • Jul 9, 2022 EPSS Score
  • Nov 14, 2022 EPSS Score
Open in Interactive Console →
$ Console Community · 50/day Open console ›