A reflected cross-site script vulnerability in GitLab before versions
13.11.6, 13.12.6 and 14.0.2 allowed an attacker to send a malicious link to
a victim and trigger actions on their behalf if they clicked it
gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22227.json
gitlab.com/gitlab-org/gitlab/-/issues/212887
hackerone.com/reports/834555
launchpad.net/bugs/cve/CVE-2021-22227
nvd.nist.gov/vuln/detail/CVE-2021-22227
security-tracker.debian.org/tracker/CVE-2021-22227
www.cve.org/CVERecord?id=CVE-2021-22227