← Back to browse · API

CVE-2021-22242

Severity
HIGH
CVSS
8.7
EPSS
0.63555
Risk score
57.04
CISA KEV
No
PoC
No
Published
2021-08-25
Modified
2024-08-03
First seen
2026-08-08
Aliases
EUVD-2021-9388, GHSA-3R2F-RPGW-83GM
Products
GitLab:GitLab 11.4, <13.12.9, GitLab:GitLab 14.0, <14.0.7, GitLab:GitLab 14.1, <14.1.2
Sources
euvd EUVD-2021-9388

Description

Insufficient input sanitization in Mermaid markdown in GitLab CE/EE version 11.4 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted markdown

References