GitLab Cross-Site Scripting Vulnerability (CNVD-2022-05444)

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD (continuous integration and continuous delivery), and other features.A cross-site scripting vulnerability exists in GitLab CE/EE, which stems from the fact that the program is vulnerable to injection via the Swagger UI feature. An attacker could exploit this vulnerability to inject malicious code.