Gitlab · Gitlab Ce/Ee · CVE-2019-6781
**Name of the Vulnerable Software and Affected Versions**
GitLab Community and Enterprise Edition versions 11.5.8 and earlier
GitLab Community and Enterprise Edition versions 11.6.x through 11.6.5
GitLab Community and Enterprise Edition versions 11.7.x through 11.7.0
**Description**
An Improper Input Validation issue was discovered. It was possible to use the profile name to inject a potentially malicious link into notification emails.
**Recommendations**
For versions 11.5.8 and earlier, update to version 11.5.8 or later.
For versions 11.6.x through 11.6.5, update to version 11.6.6 or later.
For versions 11.7.x through 11.7.0, update to version 11.7.1 or later.