Gitlab · Gitlab Ce/Ee · CVE-2018-19570
**Name of the Vulnerable Software and Affected Versions**
GitLab CE/EE versions 11.3 before 11.3.11
GitLab CE/EE versions 11.4 before 11.4.8
GitLab CE/EE versions 11.5 before 11.5.1
**Description**
The issue is related to an XSS vulnerability in Markdown fields via unrecognized HTML tags.
**Recommendations**
For GitLab CE/EE versions 11.3 before 11.3.11, update to version 11.3.11 or later.
For GitLab CE/EE versions 11.4 before 11.4.8, update to version 11.4.8 or later.
For GitLab CE/EE versions 11.5 before 11.5.1, update to version 11.5.1 or later.