EUVD-2022-15814

Malicious code in bioql PyPI...

BIT-GITLAB-2022-0751

Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets with misleading content which could trick unsuspecting users into executing arbitrary commands...

Cross-Site Scripting (XSS)

gitlab is vulnerable to Cross-Site Scripting XSS. The vulnerability exists because the inaccurate display of Snippet files containing special characters, which allows an attacker to create Snippets with misleading content that could potentially trick unsuspecting users into executing arbitrary...

CVE-2022-0751

Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets with misleading content which could trick unsuspecting users into executing arbitrary commands...

Command injection

Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets with misleading content which could trick unsuspecting users into executing arbitrary commands...