Security Advisory
CVE-2019-12442
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An issue was discovered in GitLab Enterprise Edition 11.7 through 11.11. The epic details page contained a lack of input validation and output encoding issue which resulted in a persistent XSS vulnerability on child epics.