CVE-2014-3456

CVE-2014-3456 is a cross-site scripting (XSS) vulnerability in GitLab Enterprise Edition (EE) 6.6.0, fixed in 6.6.2. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected sources confirm the affected product/version and the availability of...