Lucene search

CVE-2021-22196

🗓️ 02 Apr 2021 17:12:15Reported by [email protected]Type

GitLab CE/EE vulnerability with stored cross-site-scripting in merge request

Reporter	Title	Published	Views	Family All 9
CVE	CVE-2021-22196	2 Apr 202117:15	–	cve
Prion	Cross site scripting	2 Apr 202117:15	–	prion
Tenable Nessus	GitLab 13.4 < 13.8.7 / 13.9 < 13.9.5 / 13.10 < 13.10.1 (CVE-2021-22196)	3 Jan 202400:00	–	nessus
OSV	BIT-gitlab-2021-22196	6 Mar 202411:20	–	osv
OSV	CVE-2021-22196	2 Apr 202117:15	–	osv
Veracode	Cross-site Scripting (XSS)	6 Aug 202314:28	–	veracode
Cvelist	CVE-2021-22196	2 Apr 202116:14	–	cvelist
UbuntuCve	CVE-2021-22196	2 Apr 202100:00	–	ubuntucve
Debian CVE	CVE-2021-22196	2 Apr 202117:15	–	debiancve

Nvd

Node

gitlab gitlabRange13.4.0–13.8.7community

gitlab gitlabRange13.4.0–13.8.7enterprise

gitlab gitlabRange13.9.0–13.9.5community

gitlab gitlabRange13.9.0–13.9.5enterprise

gitlab gitlabRange13.10.0–13.10.1community

gitlab gitlabRange13.10.0–13.10.1enterprise

Source	Link
hackerone	www.hackerone.com/reports/977697
gitlab	www.gitlab.com/gitlab-org/gitlab/-/issues/254710
gitlab	www.gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22196.json

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Apr 2021 17:15Current

CVSS23.5

CVSS35.4

EPSS0.00307

CWE-79