NetSight
IP …
low3.5

CVE-2021-22232

HTML injection was possible via the full name field before versions 13.11.6, 13.12.6, and 14.0.2 in GitLab CE

Impact

HTML injection was possible via the full name field before versions 13.11.6, 13.12.6, and 14.0.2 in GitLab CE

Affected products

VendorProductAffected versions
GitlabGitlab
from 9.5.0 before 13.11.6
from 13.12.0 before 13.12.6
from 14.0.0 before 14.0.2

Weakness classification

CWE-74

References