Beveiligingsadvies
CVE-2020-13262
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
Client-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through 13.0.1 allows a specially crafted Mermaid payload to PUT requests on behalf of other users via clicking on a link