CVE-2019-15586

Description

A XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://hackerone.com/reports/645043 ↗
• https://about.gitlab.com/blog/2019/09/30/security-release-gitlab-12-dot-3-dot-2-released/ ↗