CVE-2019-12442: GitLab

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue was discovered in GitLab Enterprise Edition 11.7 through 11.11. The epic details page contained a lack of input validation and output encoding issue which resulted in a persistent XSS vulnerability on child epics.

Affected products

• GitLab GitLab: from 11.7.0, up to and including 11.11.0

Published 2020-03-10. Last modified 2026-06-17.