CVE-2021-22230 log

Source
Severity Medium
Remote Yes
Type Arbitrary code execution
Description
Improper code rendering while rendering merge requests could be exploited to submit malicious code. This vulnerability affects GitLab CE/EE 9.3 and later up to 14.0.2.
Group Package Affected Fixed Severity Status Ticket
AVG-2125 gitlab 14.0.1-1 14.0.3-1 High Fixed
Date Advisory Group Package Severity Type
06 Jul 2021 ASA-202107-18 AVG-2125 gitlab High multiple issues
References
https://gitlab.com/gitlab-org/gitlab/-/issues/211976
https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22230.json