CVE-2021-22232
HTML injection was possible via the full name field before versions 13.11.6, 13.12.6, and 14.0.2 in GitLab CE
Description d'origine
La description telle que publiée par la source (souvent en anglais).
HTML injection was possible via the full name field before versions 13.11.6, 13.12.6, and 14.0.2 in GitLab CE
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"9.5.0"},{"fixed":"13.11.6"},{"introduced":"13.12.0"},{"fixed":"13.12.6"},{"introduced":"14.0.0"},{"fixed":"14.0.2"}]}]
Références
- advisory gitlab.com
- web gitlab.com
- web hackerone.com
- web nvd.nist.gov