CVE-2021-39906
Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaScript code on the victim's beha...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaScript code on the victim's behalf.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"13.5.0"},{"fixed":"14.2.6"},{"introduced":"14.3.0"},{"fixed":"14.3.4"},{"introduced":"14.4.0"},{"fixed":"14.4.1"}]}]
Références
- advisory gitlab.com
- advisory hackerone.com
- web gitlab.com
- web nvd.nist.gov