Medium severity6.1OSV Advisory· Published Apr 25, 2019· Updated Jun 17, 2026
CVE-2018-18643
CVE-2018-18643
Description
GitLab CE & EE 11.2 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 have Persistent XSS.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
32v1.2.0, v1.2.0pre, v1.2.1, …+ 27 more
- (no CPE)range: v1.2.0, v1.2.0pre, v1.2.1, …
- (no CPE)range: 11.2 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: <=11.2.0
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: <=11.2.0
- cpe:2.3:a:gitlab:gitlab:11.5.0:-:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:-:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc1:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc1:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc10:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc10:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc11:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc11:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc2:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc2:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc3:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc3:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc4:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc4:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc5:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc5:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc6:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc6:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc7:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc7:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc8:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc8:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc9:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc9:*:*:enterprise:*:*:*
- osv-coords4 versionspkg:apk/chainguard/gitlab-operatorpkg:apk/chainguard/gitlab-operator-chartspkg:apk/chainguard/gitlab-operator-compatpkg:apk/chainguard/gitlab-operator-fips
< 0+ 3 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/gitlab-ce/issues/53385nvdPatchVendor Advisory
- about.gitlab.com/2018/11/19/critical-security-release-gitlab-11-dot-4-dot-6-released/nvdVendor Advisory
- about.gitlab.com/blog/categories/releases/nvdVendor Advisory
News mentions
0No linked articles in our index yet.