Code Injection

gitlab is vulnerable to Code Injection. The vulnerability is due to there is no sanitization of KaTeX directives, allowing them to escape their intended container. This allows an attacker to hijack some links and buttons on the GitLab UI to a malicious page...