← All advisories

Medium severity6.1NVD Advisory· Published Jun 8, 2021· Updated Jun 17, 2026

CVE-2021-22220

CVE-2021-22220

Description

An issue has been discovered in GitLab affecting all versions starting with 13.10. GitLab was vulnerable to a stored XSS in blob viewer of notebooks.

Affected products

4

GitLab Inc./GitLab3 versions
cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: >=13.10,<=13.10.5
- (no CPE)range: before 13.10
- (no CPE)range: >=13.12, <13.12.2
osv-coords
pkg:bitnami/gitlab
Range: >= 13.10.0, < 13.10.5

Patches

Vulnerability mechanics

References

3

gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22220.jsonnvdThird Party Advisory
gitlab.com/gitlab-org/gitlab/-/issues/294128nvdBroken Link
hackerone.com/reports/1060114nvdPermissions Required

News mentions

0

No linked articles in our index yet.