← All advisories

Medium severity6.1NVD Advisory· Published Sep 16, 2019· Updated Jun 17, 2026

CVE-2019-15724

CVE-2019-15724

Description

An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.2.1. Label descriptions are vulnerable to HTML injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

GitLab/Community and Enterprise Editiondescription
GitLab Inc./GitLab Community Editionllm-fuzzy
Range: 11.10 - 12.2.1
GitLab Inc./GitLab Enterprise Editionllm-fuzzy
Range: 11.10 - 12.2.1
GitLab Inc./GitLab2 versions
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 1 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=11.10.0,<12.0.8
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=11.10.0,<12.0.8

Patches

Vulnerability mechanics

References

2

about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/nvdRelease NotesVendor Advisory
gitlab.com/gitlab-org/gitlab-ce/issues/60888nvdBroken Link

News mentions

0

No linked articles in our index yet.