Security Advisory

CVE-2021-39906

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-11-04 23:04:36

Last updated 2024-08-04 02:20:33

Assigner GitLab

CVSS score 8.7

State PUBLISHED

Description

Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaScript code on the victim's behalf.

← Browse all CVEs View on cve.org ↗