| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | = 8.15.0= 8.15.1= 8.15.2= 8.15.3= 8.15.4= 8.15.5= 8.16.0= 8.16.1= 8.16.2= 8.16.3= 8.16.4≤ 8.14.9 |
GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element in an issue attachment or avatar that is an SVG document.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free