Lucene search
PRIOn knowledge basePRION:CVE-2021-39885HistoryOct 04, 2021 - 5:15 p.m.
Cross site scripting
2021-10-0417:15:00
PRIOn knowledge base
www.prio-n.com
4
A Stored XSS in merge request creation page in all versions of Gitlab EE starting from 13.7 before 14.1.7, all versions starting from 14.2 before 14.2.5, and all versions starting from 14.3 before 14.3.1 allows an attacker to execute arbitrary JavaScript code on the victim’s behalf via malicious approval rule names
Related
nessus
nessus
GitLab 13.7 < 14.1.7 / 14.2 < 14.2.5 / 14.3 < 14.3.1 (CVE-2021-39885)
2024-01-03 00:00:00
FreeBSD : Gitlab -- vulnerabilities (1bdd4db6-2223-11ec-91be-001b217b3468)
2021-10-05 00:00:00
nvd
nvd
CVE-2021-39885
2021-10-04 17:15:08
cve
cve
CVE-2021-39885
2021-10-04 17:15:08
osv
osv
BIT-gitlab-2021-39885
2024-03-06 11:18:27
CVE-2021-39885
2021-10-04 17:15:08
debiancve
debiancve
CVE-2021-39885
2021-10-04 17:15:08
ubuntucve
ubuntucve
CVE-2021-39885
2021-10-04 00:00:00
cvelist
cvelist
CVE-2021-39885
2021-10-04 16:33:54
freebsd
freebsd
Gitlab -- vulnerabilities
2021-09-30 00:00:00