CVE-2022-0427
Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows an attacker to perform arbitrary HTTP POST requests on a u…
Published: 2022-03-28 · CVSS: 7.7 · CVSS 3.1
Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows an attacker to perform arbitrary HTTP POST requests on a user's behalf leading to potential account takeover
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7