Security Advisory
CVE-2020-13271
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all previous GitLab CE/EE versions through 13.0.1