| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 11.0.0, < 11.0.5≥ 11.1.0, < 11.1.2< 10.8.7 | 11.0.511.1.210.8.7 |
An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. XSS can occur via a Milestone name during a promotion.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free