Lucene search

CVE-2021-22199

🗓️ 22 Apr 2021 22:11:15Reported by GitLabType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 40 Views

GitLab 12.9+ vulnerable to stored XSS with scoped labels

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 10
OSV	BIT-gitlab-2021-22199	6 Mar 202411:20	–	osv
OSV	CVE-2021-22199	22 Apr 202122:15	–	osv
Cvelist	CVE-2021-22199	22 Apr 202121:56	–	cvelist
Prion	Cross site scripting	22 Apr 202122:15	–	prion
Tenable Nessus	GitLab 12.9 < 13.8.7 / 13.9.0 < 13.9.5 / 13.10 < 13.10.1 (CVE-2021-22199)	2 Jan 202400:00	–	nessus
CNVD	GitLab Cross-Site Scripting Vulnerability (CNVD-2021-30702)	23 Apr 202100:00	–	cnvd
NVD	CVE-2021-22199	22 Apr 202122:15	–	nvd
Veracode	Cross-site Scripting (XSS)	6 Aug 202314:28	–	veracode
UbuntuCve	CVE-2021-22199	22 Apr 202100:00	–	ubuntucve
Debian CVE	CVE-2021-22199	22 Apr 202122:15	–	debiancve

Nvd

Vulners

Node

gitlab gitlabRange12.9–13.8.7community

gitlab gitlabRange12.9–13.8.7enterprise

gitlab gitlabRange13.9.0–13.9.5community

gitlab gitlabRange13.9.0–13.9.5enterprise

gitlab gitlabRange13.10.0–13.10.1community

gitlab gitlabRange13.10.0–13.10.1enterprise

[
  {
    "product": "GitLab",
    "vendor": "GitLab",
    "versions": [
      {
        "status": "affected",
        "version": ">=13.10, <13.10.1"
      },
      {
        "status": "affected",
        "version": ">=13.9.0, <13.9.5"
      },
      {
        "status": "affected",
        "version": ">=12.9, <13.8.7"
      }
    ]
  }
]

Source	Link
gitlab	www.gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22199.json
hackerone	www.hackerone.com/reports/1050189
gitlab	www.gitlab.com/gitlab-org/gitlab/-/issues/291004

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Apr 2021 22:15Current

4.9Medium risk

Vulners AI Score4.9

CVSS23.5

CVSS33.5 - 5.4

EPSS0.00283

CWE-79