Unrated severityNVD Advisory· Published Apr 15, 2023· Updated Feb 6, 2025

CVE-2018-17536

Description

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is stored XSS on the merge request page via project import.

Affected products

GitLab/GitLab Community and Enterprise Editiondescription
osv-coords4 versions
pkg:apk/chainguard/gitlab-operator pkg:apk/chainguard/gitlab-operator-charts pkg:apk/chainguard/gitlab-operator-compat pkg:apk/chainguard/gitlab-operator-fips
< 0+ 3 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

about.gitlab.com/blog/categories/releases/mitre
about.gitlab.com/releases/2018/10/01/security-release-gitlab-11-dot-3-dot-1-released/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000