Medium severity6.1NVD Advisory· Published Mar 10, 2020· Updated Jun 17, 2026
CVE-2019-12442
CVE-2019-12442
Description
An issue was discovered in GitLab Enterprise Edition 11.7 through 11.11. The epic details page contained a lack of input validation and output encoding issue which resulted in a persistent XSS vulnerability on child epics.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- GitLab/GitLab Enterprise Editiondescription
- Range: 11.7 - 11.11
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 1 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=11.7.0,<=11.11.0
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=11.7.0,<=11.11.0
Patches
Vulnerability mechanics
References
2- about.gitlab.com/blog/categories/releases/nvdRelease NotesVendor Advisory
- about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/nvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.