GitLab EE version 11.5 is vulnerable to a persistent XSS vulnerability in the Operations page. This is fixed in 11.5.1.
CVE Status: Modified
No CVSS data available
Exploit-db Github