GitLab 12.1 through 12.8.1 allows XSS. The merge request submission form was determined to have a stored cross-site scripting vulnerability.

Published Mar 13, 2020 · Updated Aug 4, 2024 · Assigned by mitre