Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting.
{
"source": "CPE_STRING",
"cpe": [
"cpe:2.3:a:gitlab:gitlab:9.5.10:*:*:*:community:*:*:*",
"cpe:2.3:a:gitlab:gitlab:9.5.10:*:*:*:enterprise:*:*:*",
"cpe:2.3:a:gitlab:gitlab:10.1.5:*:*:*:community:*:*:*",
"cpe:2.3:a:gitlab:gitlab:10.1.5:*:*:*:enterprise:*:*:*",
"cpe:2.3:a:gitlab:gitlab:10.2.5:*:*:*:community:*:*:*",
"cpe:2.3:a:gitlab:gitlab:10.2.5:*:*:*:enterprise:*:*:*",
"cpe:2.3:a:gitlab:gitlab:10.3.3:*:*:*:community:*:*:*",
"cpe:2.3:a:gitlab:gitlab:10.3.3:*:*:*:enterprise:*:*:*"
],
"extracted_events": [
{
"introduced": "9.5.10"
},
{
"last_affected": "9.5.10"
},
{
"introduced": "10.1.5"
},
{
"last_affected": "10.1.5"
},
{
"introduced": "10.2.5"
},
{
"last_affected": "10.2.5"
},
{
"introduced": "10.3.3"
},
{
"last_affected": "10.3.3"
}
]
}