CVE-2018-9243

MEDIUM · CVSS 6.1 EPSS 1.00%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-04-05 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2018-9243

Severity

MEDIUM

CVSS

6.1

EPSS

1.00%

GitLab

Original Filing — NVD Description

GitLab Community and Enterprise Editions version 8.4 up to 10.4 are vulnerable to XSS because a lack of input validation in the merge request component leads to cross site scripting (specifically, filenames in changes tabs of merge requests). This is fixed in 10.6.3, 10.5.7, and 10.4.7.