CVE-2021-39906

Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaScript code on the victim's behalf

High · published November 4, 2021

Patch now

High probability of exploitation

CVSS calls it high at 8.7. It sits in the 99.1th percentile for exploit probability.

CVSS v3.1
8.7
EPSS
61%
Percentile
99.1
In the wild
Unconfirmed
What it is

Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaScript code on the victim's behalf.

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.60729 · 99.1th percentile
Published
2021-11-04T23:04Z
EPSS history
Timeline
  • 04 NOV 23:04Z
    Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaScript code on the victim's behalf
    cvelistv5