VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Mar 21, 2018· Updated Jun 17, 2026

CVE-2017-0923

CVE-2017-0923

Description

Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting.

Affected products

10
  • GitLab Inc./GitLab Community Editionllm-fuzzy2 versions
    = 9.1+ 1 more
    • (no CPE)range: = 9.1
    • (no CPE)range: 9.1.0 - 10.1.5 Fixed in 10.1.6
  • GitLab Inc./GitLab8 versions
    cpe:2.3:a:gitlab:gitlab:9.5.10:*:*:*:community:*:*:*+ 7 more
    • cpe:2.3:a:gitlab:gitlab:9.5.10:*:*:*:community:*:*:*
    • cpe:2.3:a:gitlab:gitlab:9.5.10:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:gitlab:gitlab:10.1.5:*:*:*:community:*:*:*
    • cpe:2.3:a:gitlab:gitlab:10.1.5:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:gitlab:gitlab:10.2.5:*:*:*:community:*:*:*
    • cpe:2.3:a:gitlab:gitlab:10.2.5:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:gitlab:gitlab:10.3.3:*:*:*:community:*:*:*
    • cpe:2.3:a:gitlab:gitlab:10.3.3:*:*:*:enterprise:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.