CVE-2018-10379

MEDIUM 6.1CVE-2018-10379 · Published 31/05/2018 · updated 17/06/2026

In short

CVE-2018-10379 is a MEDIUM (CVSS 6.1) vulnerability affecting gitlab (gitlab).
Chance of exploitation in the next 30 days (EPSS): 0.86%, higher than 58.6% of all vulnerabilities.
Fix: update to 10.6.5, 10.7.2, 10.5.8 or later.

Package	Affected versions	Patched versions
gitlab gitlab	`≥ 10.6.0, < 10.6.5≥ 10.7.0, < 10.7.2< 10.5.8`	`10.6.510.7.210.5.8`

Description

An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 10.5.8, 10.6.x before 10.6.5, and 10.7.x before 10.7.2. The Move Issue feature contained a persistent XSS vulnerability.

References

securityfocus.com/bid/104491 · Third Party Advisory
about.gitlab.com/2018/04/30/security-release-gitlab-10-dot-7-dot-2-released · Release Notes

More vulnerabilities in gitlab

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gitlab

≥ 10.6.0, < 10.6.5≥ 10.7.0, < 10.7.2< 10.5.8

10.6.510.7.210.5.8

More vulnerabilities in gitlab

See all →