medium4.9
CVE-2021-22230
Improper code rendering while rendering merge requests could be exploited to submit malicious code.
Impact
Improper code rendering while rendering merge requests could be exploited to submit malicious code. This vulnerability affects GitLab CE/EE 9.3 and later through 13.11.6, 13.12.6, and 14.0.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | from 9.3.0 before 13.11.6 from 13.12.0 before 13.12.6 from 14.0.0 before 14.0.2 |