Lucene search
China National Vulnerability DatabaseCNVD-2021-91184HistoryNov 01, 2021 - 12:00 a.m.
GitLab Cross-Site Scripting Vulnerability (CNVD-2021-91184)
2021-11-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
0.001 Low
EPSS
Percentile
40.4%
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD (continuous integration and continuous delivery), and other features.GitLab CE/EE is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to execute arbitrary JavaScript code on behalf of victims.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gitlab gitlab ce/ee | ge | 13.5 |
Related
debiancve
debiancve
CVE-2021-39906
2021-11-05 00:15:10
osv
osv
BIT-gitlab-2021-39906
2024-03-06 11:17:58
CVE-2021-39906
2021-11-05 00:15:10
cvelist
cvelist
CVE-2021-39906
2021-11-04 23:04:36
ubuntucve
ubuntucve
CVE-2021-39906
2021-11-05 00:00:00
cve
cve
CVE-2021-39906
2021-11-05 00:15:10
prion
prion
Input validation
2021-11-05 00:15:00
nvd
nvd
CVE-2021-39906
2021-11-05 00:15:10
nessus
nessus
GitLab 13.5 < 14.2.6 / 14.3 < 14.3.4 / 14.4 < 14.4.1 (CVE-2021-39906)
2022-04-20 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2023-08-06 20:06:10
freebsd
freebsd
Gitlab -- Multiple Vulnerabilities
2021-10-28 00:00:00