VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Dec 30, 2019· Updated Jun 17, 2026

CVE-2018-20496

CVE-2018-20496

Description

An issue was discovered in GitLab Community and Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • GitLab/Community and Enterprise Editiondescription
  • GitLab Inc./GitLab3 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 2 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=8.10.0,<11.4.13
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=8.10.0,<11.4.13
    • (no CPE)range: 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1
  • GitLab Inc./GitLab Community Editionllm-fuzzy
    Range: 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1
  • GitLab Inc./GitLab Enterprise Editionllm-fuzzy
    Range: 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.