CVE-2018-18643

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-18643
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-18643.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-18643
Related
Published
2019-04-25T21:29:00.230Z
Modified
2026-04-10T04:07:17.418536Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

GitLab CE & EE 11.2 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 have Persistent XSS.

References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
44dbeccbe1039cb1d42d8502655ffb0bce3ae803
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
44dbeccbe1039cb1d42d8502655ffb0bce3ae803
Introduced
1bbe39452664021af90851aef8527ce5e850343e
Fixed
8f5bb26587aa656888277496313d951656d8856e
Introduced
1bbe39452664021af90851aef8527ce5e850343e
Fixed
8f5bb26587aa656888277496313d951656d8856e
Introduced
cfe266cbac3c5d413e9c061fff420630e517005f
Fixed
4b6c59d8dd60a398ec656abbf8a1ad636dbc0894
Introduced
cfe266cbac3c5d413e9c061fff420630e517005f
Fixed
4b6c59d8dd60a398ec656abbf8a1ad636dbc0894
Introduced
d61035475bf4887269f0620a01ca30bd2481bb77
Last affected
985cc000d4aec779e6c08509508974ffa9c8c58b
Introduced
d61035475bf4887269f0620a01ca30bd2481bb77
Last affected
985cc000d4aec779e6c08509508974ffa9c8c58b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cb71fca38c3de0c212685f97a46ee8426f63d301
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cb71fca38c3de0c212685f97a46ee8426f63d301
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d7b605dec6397374b17b72c025dcf722c7fffadb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d7b605dec6397374b17b72c025dcf722c7fffadb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
71b9de0f2dbeca847e15a0469ca5d1669ddf41ad
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
71b9de0f2dbeca847e15a0469ca5d1669ddf41ad
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
90d7367abe4e53490a702b3d4fe04509d3edc012
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
90d7367abe4e53490a702b3d4fe04509d3edc012
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8d968e5eeb285ac3b3376742db1bd30c7ffd7a7e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8d968e5eeb285ac3b3376742db1bd30c7ffd7a7e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d782cf27ed3bc03e76b6d26bc4831752d2aa7613
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d782cf27ed3bc03e76b6d26bc4831752d2aa7613
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0e4034578934fe508d8b1fda02e9953f53ffd15e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0e4034578934fe508d8b1fda02e9953f53ffd15e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1f8e7c62f86603c8befe2509edc133a2c8bb2e68
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1f8e7c62f86603c8befe2509edc133a2c8bb2e68
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d835de513723032d7f2470eb08ba7dcf09d72e56
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d835de513723032d7f2470eb08ba7dcf09d72e56
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9c782a62d233b0d3771391d8fd5362681dd139dd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9c782a62d233b0d3771391d8fd5362681dd139dd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
79d2eaa8709a932c34cb4af3518b8ad7fc8b483e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
79d2eaa8709a932c34cb4af3518b8ad7fc8b483e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e1e277fcb746d13eb3a70926ded1bd922185e616
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e1e277fcb746d13eb3a70926ded1bd922185e616
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.2.0"
        },
        {
            "introduced": "11.3.0"
        },
        {
            "fixed": "11.3.10"
        },
        {
            "introduced": "11.3.0"
        },
        {
            "fixed": "11.3.10"
        },
        {
            "introduced": "11.4.0"
        },
        {
            "fixed": "11.4.6"
        },
        {
            "introduced": "11.4.0"
        },
        {
            "fixed": "11.4.6"
        },
        {
            "introduced": "11.4.7"
        },
        {
            "last_affected": "11.4.9"
        },
        {
            "introduced": "11.4.7"
        },
        {
            "last_affected": "11.4.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "11.5.0-rc9"
        }
    ]
}

Affected versions

v1.*
v1.2.0
v1.2.0pre
v1.2.1
v1.2.2
v10.*
v10.1.0.pre
v10.2.0.pre
v10.3.0.pre
v10.4.0.pre
v10.5.0.pre
v10.6.0.pre
v10.7.0.pre
v10.8.0.pre
v10.9.0.pre
v11.*
v11.0.0.pre
v11.1.0.pre
v11.2.0.pre
v11.3.0-ee
v11.3.0-rc1-ee
v11.3.0-rc10-ee
v11.3.0-rc11-ee
v11.3.0-rc2-ee
v11.3.0-rc3-ee
v11.3.0-rc4-ee
v11.3.0-rc5-ee
v11.3.0-rc6-ee
v11.3.0-rc7-ee
v11.3.0-rc8-ee
v11.3.0-rc9-ee
v11.3.1-ee
v11.3.2-ee
v11.3.3-ee
v11.3.4-ee
v11.3.5-ee
v11.3.6-ee
v11.3.7-ee
v11.3.8-ee
v11.3.9-ee
v11.4.0-ee
v11.4.0-rc1-ee
v11.4.0-rc2-ee
v11.4.0-rc3-ee
v11.4.1-ee
v11.4.2-ee
v11.4.3-ee
v11.4.4-ee
v11.4.5-ee
v11.4.8-ee
v11.4.9-ee
v11.5.0-ee
v11.5.0-rc1-ee
v11.5.0-rc10-ee
v11.5.0-rc11-ee
v11.5.0-rc12-ee
v11.5.0-rc13-ee
v11.5.0-rc2-ee
v11.5.0-rc3-ee
v11.5.0-rc4-ee
v11.5.0-rc5-ee
v11.5.0-rc6-ee
v11.5.0-rc7-ee
v11.5.0-rc8-ee
v11.5.0-rc9-ee
v2.*
v2.3.0
v2.3.0pre
v2.3.1
v2.4.0
v2.4.0pre
v2.4.1
v2.5.0
v2.6.0
v2.6.0pre
v2.6.1
v2.6.2
v2.6.3
v2.7.0
v2.7.0pre
v2.8.0
v2.8.0pre
v2.8.1
v2.8.2
v2.9.0
v2.9.1
v3.*
v3.0.0
v3.0.1
v3.0.2
v3.0.3
v3.1.0
v4.*
v4.0.0
v4.0.0rc1
v4.0.0rc2
v5.*
v5.0.0
v5.1.0
v5.2.0
v5.3.0
v6.*
v6.0.0
v6.0.0-ee
v6.0.0-ee.beta
v6.0.0-ee.rc1
v6.1.0-ee
v6.2.0
v6.3.0
v6.3.0-ee
v6.3.1-ee
v6.4.0
v6.4.0-ee
v6.4.0.pre1
v6.4.0.pre2
v6.4.0.pre3
v6.5.0
v6.5.0-ee
v6.5.0.rc1
v6.6.0
v6.6.0-ee
v6.6.0.pre1
v6.6.0.rc1
v6.7.0-ee
v6.7.0.rc1
v6.7.0.rc1-ee
v6.8.0-ee
v7.*
v7.0.0
v7.0.0-ee
v7.0.0.rc1
v7.1.0
v7.1.0-ee
v7.1.0.rc1
v7.1.0.rc1-ee
v7.2.0.rc1
v7.2.0.rc1-ee
v7.2.0.rc2
v7.2.0.rc2-ee
v7.2.0.rc3
v7.2.0.rc3-ee
v7.2.0.rc4
v7.2.0.rc4-ee
v7.2.0.rc5
v7.2.0.rc5-ee
v7.3.0
v7.3.0-ee
v7.3.0.rc1
v7.3.0.rc1-ee
v8.*
v8.11.0.pre
v8.13.0.pre
v8.14.0.pre
v8.15.0.pre
v8.16.0.pre
v8.17.0.pre
v8.18.0.pre
v9.*
v9.2.0.pre
v9.3.0.pre
v9.5.0.pre
v9.6.0.pre

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-18643.json"