CVE-2021-22199 log

Source
Severity Low
Remote Yes
Type Cross-site scripting
Description
An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored cross-site scripting (XSS) attack if scoped labels were used. The issue is fixed in GitLab versions 13.10.1, 13.9.5 and 13.8.7.
Group Package Affected Fixed Severity Status Ticket
AVG-1770 gitlab 13.9.4-1 13.10.1-1 Critical Fixed
References
https://about.gitlab.com/releases/2021/03/31/security-release-gitlab-13-10-1-released/#stored-xss-in-scoped-labels
https://gitlab.com/gitlab-org/gitlab/-/issues/291004
https://hackerone.com/reports/1050189