Lucene search

K
osvGoogleOSV:CVE-2021-22223
HistoryJul 06, 2021 - 10:15 p.m.

CVE-2021-22223

2021-07-0622:15:08
Google
osv.dev
5

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.4%

Client-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a specially crafted feature flag name to PUT requests on behalf of other users via clicking on a link

CPENameOperatorVersion
gitlabeq14.0.1-ee
gitlabeq14.0.0-ee

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.4%