CVE-2021-22199
An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored XSS if scoped labels were used.
Original description
The description as published by the source.
An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored XSS if scoped labels were used.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"12.9.0"},{"fixed":"13.8.7"},{"introduced":"13.9.0"},{"fixed":"13.9.5"},{"introduced":"13.10.0"},{"fixed":"13.10.1"}]}]
References
- advisory gitlab.com
- report gitlab.com
- report hackerone.com
- web nvd.nist.gov