CVE-2021-39910

https://notcve.org/view.php?id=CVE-2021-39910

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. GitLab was vulnerable to HTML Injection through the Swagger UI feature. Se ha detectado un problema en GitLab CE/EE afectando a todas las versiones a partir de 12.6 anteriores a 14.3.6, todas las versiones a partir de 14.4 anteriores a 14.4.4, todas las versiones a partir de 14.5 anteriores a 14.5.2. GitLab era vulnerable a una inyección de HTML mediante la función Swagger UI • https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39910.json https://gitlab.com/gitlab-org/gitlab/-/issues/325901 https://hackerone.com/reports/1133656 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •