GMS-2018-23: Cross Site Scripting

February 26, 2018

simplehttpserver allows embedding HTML in file names, which in certain conditions allows execution of malicious JavaScript.

References

hackerone.com/reports/309648

Detect and mitigate GMS-2018-23 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →