Beveiligingsadvies

CVE-2021-22196

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-04-02 16:14:37
Laatst bijgewerkt 2024-08-03 18:37:17
Toegewezen door GitLab
CVSS-score 6.3
Status PUBLISHED

Beschrijving

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4. It was possible to exploit a stored cross-site-scripting in merge request via a specifically crafted branch name.