GMS-2018-8: Reflected Cross-Site Scripting

January 23, 2018

Malicious input in the highlighterId parameter of the clipboard.swf component can be leveraged in a reflected XSS on hosts serving Redis Commander. Mitigating factors: Flash must be installed/enabled for this to work.

References

hackerone.com/reports/296377

Code Behaviors & Features

Detect and mitigate GMS-2018-8 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →