A cross-site scripting vulnerability exists in Gitlab CE/EE starting with 12.4 that allows an attacker to perform cross-site scripting to other users via importing a malicious project. It is fixed in Gitlab versions 13.6.2, 13.5.5 and 13.4.7.
A cross-site scripting vulnerability exists in Gitlab CE/EE starting with 12.4 that allows an attacker to perform cross-site scripting to other users via importing a malicious project. It is fixed in Gitlab versions 13.6.2, 13.5.5 and 13.4.7.
https://about.gitlab.com/releases/2020/12/07/security-release-gitlab-13-6-2-released/#xss-in-zoom-meeting-url
Vulmon