MEDIUM

CVE-2019-5467

Gitlab GitLab 2019-09-09 CVSS v3.1

CVSS

5.4

Description

An input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages feature which could result in a persistent XSS. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.

Weakness (CWE)

CWE-79 Cross-site Scripting (XSS)

EPSS Score

0.74%

Probability of exploitation in next 30 days

53.1th percentile

References

https://gitlab.com/gitlab-org/gitlab-ce/issues/60143 Exploit, Issue Tracking, Third Party Advisory https://hackerone.com/reports/526325 Exploit, Third Party Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE