[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2019-5471":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":26,"cwes":27,"cpes":29,"technologies":60,"references":62,"score":66,"epss_score":67,"epss_percentile":68,"is_kev":69,"cisa_kev_date_added":70,"cisa_kev_due_date":70,"cisa_ssvc":71,"attack_mappings":77,"exploits":84},233333,"CVE-2019-5471","EUVD-2019-15053","An input validation and output encoding issue was discovered in the GitLab email notification feature which could result in a persistent XSS. This was addressed in GitLab 12.1.2, 12.0.4, and 11.11.6.","2019-09-09T18:15:00Z",{"cvss_v2.0":10,"cvss_v3.1":19},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":18,"confidentialityImpact":18},"2.0",3.5,"NETWORK","AV:N\u002FAC:M\u002FAu:S\u002FC:N\u002FI:P\u002FA:N","SINGLE","PARTIAL","MEDIUM","NONE",{"scope":20,"version":21,"baseScore":22,"attackVector":13,"baseSeverity":17,"vectorString":23,"integrityImpact":24,"userInteraction":25,"attackComplexity":24,"availabilityImpact":18,"privilegesRequired":24,"confidentialityImpact":24},"CHANGED","3.1",5.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","LOW","REQUIRED",true,[28],"CWE-79",[30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59],"cpe:2.3:a:gitlab:gitlab:11.11.3:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:12.0.0:-:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:11.11.1:*:*:*:community:*:*:*","cpe:2.3:a:gitlab:gitlab:11.11.4:*:*:*:community:*:*:*","cpe:2.3:a:gitlab:gitlab:12.0.2:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:11.11.5:*:*:*:community:*:*:*","cpe:2.3:a:gitlab:gitlab:12.1.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:11.11.6:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:11.11.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:11.11.5:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:12.0.0:pre:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:12.0.2:*:*:*:community:*:*:*","cpe:2.3:a:gitlab:gitlab:11.11.2:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:11.11.0:*:*:*:community:*:*:*","cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","cpe:2.3:a:gitlab:gitlab:11.11.3:*:*:*:community:*:*:*","cpe:2.3:a:gitlab:gitlab:12.0.3:*:*:*:community:*:*:*","cpe:2.3:a:gitlab:gitlab:12.0.3:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:11.11.6:*:*:*:community:*:*:*","cpe:2.3:a:gitlab:gitlab:11.11.2:*:*:*:community:*:*:*","cpe:2.3:a:gitlab:gitlab:11.11.4:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:12.1.1:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:12.0.1:*:*:*:community:*:*:*","cpe:2.3:a:gitlab:gitlab:12.0.0:*:*:*:community:*:*:*","cpe:2.3:a:gitlab:gitlab:12.0.1:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:11.11.1:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:12.1.0:*:*:*:community:*:*:*","cpe:2.3:a:gitlab:gitlab:12.0.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:12.1.1:*:*:*:community:*:*:*",[61],"Gitlab Gitlab",[63,64,65],"https:\u002F\u002Fgitlab.com\u002Fgitlab-org\u002Fgitlab-ee\u002Fissues\u002F11515","https:\u002F\u002Fhackerone.com\u002Freports\u002F496973","https:\u002F\u002Fabout.gitlab.com\u002F2019\u002F07\u002F29\u002Fsecurity-release-gitlab-12-dot-1-dot-2-released\u002F",0.62,0.00789,0.55839,false,null,{"timestamp":70,"automatable":72,"tech_impact":73,"exploitation":74,"cisa_decision":75,"cisa_remediation_timeline":76},"no","partial","none",{},"FSU",[78],{"name":79,"source":80,"tactics":81,"technique_id":83},"Exploit Public-Facing Application","attack_vector",[82],"initial-access","T1190",[85,86],{"link":63},{"link":64}]