logo

Database

Reflected cross-site scripting (XSS) In gitlab

Description

multiple issues

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2018-37402. NVD-2018-37403. OSV-DEBIAN-2018-37404. OSV-2018-37405. GCVE-2018-37406. SECURITY-TRACKER-CVE-2018-3740

References

1. https://github.com/rgrove/sanitize/issues/1762. https://github.com/rgrove/sanitize/commit/01629a162e448a83d901456d0ba8b65f3b03d46e3. https://github.com/rgrove/sanitize/commit/93feeb38e21864146bb29191792b971dbe1ec62e4. https://about.gitlab.com/2018/06/25/security-release-gitlab-11-dot-0-dot-1-released5. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sanitize/CVE-2018-3740.yml6. https://www.debian.org/security/2018/dsa-4358

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.