Improper code rendering while rendering merge requests could be exploited to submit malicious code. This vulnerability affects GitLab CE/EE 9.3 and later through 13.11.6, 13.12.6, and 14.0.2.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gitlab | Gitlab | 9.3.0 (including) | 13.11.6 (excluding) |
| Gitlab | Gitlab | 13.12.0 (including) | 13.12.6 (excluding) |
| Gitlab | Gitlab | 14.0.0 (including) | 14.0.2 (excluding) |
| Gitlab | Ubuntu | esm-apps/xenial | * |
| Gitlab | Ubuntu | xenial | * |