14 matches found
CVE-2021-22199
An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored XSS if scoped labels were used...
EUVD-2021-9345
Malicious code in bioql PyPI...
CVE-2025-7739 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 18.2 before 18.2.2 that, under certain conditions, could have allowed authenticated users to achieve stored cross-site scripting by injecting malicious HTML content in scoped label descriptions...
BIT-GITLAB-2021-22199
An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored XSS if scoped labels were used...
GitLab 12.9 < 13.8.7 / 13.9.0 < 13.9.5 / 13.10 < 13.10.1 (CVE-2021-22199)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored XSS if scoped labels were used. CVE-2021-22199 Note that Nessus has not tested for...
Cross-site Scripting (XSS)
gitlab is vulnerable to Cross-site Scripting XSS. An attacker can inject and execute malicious javascript through the scoped labels...
GitLab: Bypass: Stored-XSS with CSP-bypass via scoped labels' color
A Stored-XSS with CSP-bypass vulnerability was discovered in GitLab that allowed attackers to execute arbitrary actions on behalf of victims at the client side. The vulnerability was caused by a missing mitigation for scoped labels, which allowed attackers to create a Stored-XSS with CSP-bypass o...
CVE-2021-22199
An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored XSS if scoped labels were used...
Cross site scripting
An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored XSS if scoped labels were used...
CVE-2021-22199
An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored XSS if scoped labels were used...
UBUNTU-CVE-2021-22199
An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored XSS if scoped labels were used...
CVE-2021-22199
An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored XSS if scoped labels were used...
CVE-2021-22199
CVE-2021-22199 (GitLab) affects all GitLab versions starting with 12.9 and later. The issue is a stored cross-site scripting (XSS) vulnerability that can be triggered when scoped labels are used. The available sources in the connected documents describe the flaw and its impact as a stored XSS in ...
PT-2021-14910 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 12.9 and later Description: An issue has been discovered in GitLab where it is vulnerable to a stored XSS if scoped labels were used. Recommendations: For GitLab versions 12.9 and later, at the moment, there is no information...