CVE-2021-22238: XSS
An issue has been discovered in GitLab affecting all versions starting with 13.3. GitLab was vulnerable to a stored XSS by using the design feature in issues.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-22238?
CVE-2021-22238 is classified as a medium severity vulnerability due to its potential for stored cross-site scripting (XSS).
How do I fix CVE-2021-22238?
To fix CVE-2021-22238, you should upgrade GitLab to a version that is not affected, specifically 13.12.10 or later, or to any version starting from 14.0.8.
Which versions of GitLab are affected by CVE-2021-22238?
CVE-2021-22238 affects all GitLab versions from 13.3.0 up to and including 13.12.9, as well as certain 14.x versions up to 14.1.2.
What type of vulnerability is CVE-2021-22238?
CVE-2021-22238 is a stored cross-site scripting (XSS) vulnerability affecting the issue design feature in GitLab.
Can CVE-2021-22238 be exploited remotely?
Yes, CVE-2021-22238 can be exploited remotely by attackers to execute scripts in the context of users' sessions.