CVE-2021-22199 - log back

CVE-2021-22199 edited at 03 Apr 2021 09:10:59
Description
- An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored cross-site scripting (XSS) attack if scoped labels were used.
+ An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored cross-site scripting (XSS) attack if scoped labels were used. The issue is fixed in GitLab versions 13.10.1, 13.9.5 and 13.8.7.
CVE-2021-22199 edited at 03 Apr 2021 09:10:43
Severity
- Unknown
+ Low
Remote
- Unknown
+ Remote
Type
- Unknown
+ Cross-site scripting
Description
+ An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored cross-site scripting (XSS) attack if scoped labels were used.
References
+ https://about.gitlab.com/releases/2021/03/31/security-release-gitlab-13-10-1-released/#stored-xss-in-scoped-labels
+ https://gitlab.com/gitlab-org/gitlab/-/issues/291004
+ https://hackerone.com/reports/1050189
Notes
CVE-2021-22199 created at 03 Apr 2021 09:03:52