high8.7
CVE-2021-39906
Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaScript code on the victim's behalf.
Impact
Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaScript code on the victim's behalf.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | from 13.5.0 before 14.2.6 from 14.3.0 before 14.3.4 from 14.4.0 before 14.4.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39906.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/341566
- https://hackerone.com/reports/1347600
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39906.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/341566
- https://hackerone.com/reports/1347600