CVE-2021-22238
An issue has been discovered in GitLab affecting all versions starting with 13.3
Medium · published August 20, 2021
Patch now
High probability of exploitation
CVSS calls it medium at 6.8. It sits in the 99.4th percentile for exploit probability.
What it is
An issue has been discovered in GitLab affecting all versions starting with 13.3. GitLab was vulnerable to a stored XSS by using the design feature in issues.
The record
Technical detail
- CVSS v3.1
- 6.8 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.71787 · 99.4th percentile
- Published
- 2021-08-20T17:39Z
EPSS history
Timeline