Lucene search

K
osvGoogleOSV:CVE-2021-22196
HistoryApr 02, 2021 - 5:15 p.m.

CVE-2021-22196

2021-04-0217:15:12
Google
osv.dev
5
gitlab
cross-site scripting
merge request

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

29.6%

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4. It was possible to exploit a stored cross-site-scripting in merge request via a specifically crafted branch name.

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

29.6%