GitLab 13.4 < 13.8.7 / 13.9 < 13.9.5 / 13.10 < 13.10.1 (CVE-2021-22196)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4. It was possible to exploit a stored cross-site-scripting in merge request via a specifically crafted branch name...

CVE-2021-22196

CVE-2021-22196 affects GitLab CE/EE starting from version 13.4 and later. The issue is a stored cross-site scripting vulnerability exploited via a specially crafted branch name in merge requests. Exploitation details and impact are described in the linked sources; remediation information (patch v...