CVE-2018-20491

5.4 mediumEPSS 0.6%

Medium (5.4) in gitlab gitlab. EPSS 0.6% chance of exploitation in the next 30 days.

An issue was discovered in GitLab Enterprise Edition 11.3.x and 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows XSS.

Severity

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2019-12-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19