CVE-2021-39906
Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaScript code on the victim's beha...
Original description
The description as published by the source.
Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaScript code on the victim's behalf.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"13.5.0"},{"fixed":"14.2.6"},{"introduced":"14.3.0"},{"fixed":"14.3.4"},{"introduced":"14.4.0"},{"fixed":"14.4.1"}]}]
References
- advisory gitlab.com
- advisory hackerone.com
- web gitlab.com
- web nvd.nist.gov