CVE-2018-16050

Source
https://cve.org/CVERecord?id=CVE-2018-16050
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-16050.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-16050
Published
2018-10-03T16:29:00.713Z
Modified
2026-04-10T04:06:42.253421Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.5 and 11.2.x before 11.2.2. There is Persistent XSS in the Merge Request Changes View.

References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Database specific
{
    "versions": [
        {
            "introduced": "10.7.0"
        },
        {
            "last_affected": "10.7.7"
        },
        {
            "introduced": "10.7.0"
        },
        {
            "last_affected": "10.7.7"
        },
        {
            "introduced": "10.8.0"
        },
        {
            "last_affected": "10.8.6"
        },
        {
            "introduced": "10.8.0"
        },
        {
            "last_affected": "10.8.6"
        },
        {
            "introduced": "11.1.0"
        },
        {
            "fixed": "11.1.5"
        },
        {
            "introduced": "11.1.0"
        },
        {
            "fixed": "11.1.5"
        },
        {
            "introduced": "11.2.0"
        },
        {
            "fixed": "11.2.2"
        },
        {
            "introduced": "11.2.0"
        },
        {
            "fixed": "11.2.2"
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-16050.json"