← Database

CVE-2021-39946

HIGH CVSS: 8.7 Published: 2022-01-18 Modified: 2026-06-17

Description

Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed an attacker to exploit XSS by abusing the generation of the HTML code related to emojis

Affected Platforms

Gitlab Gitlab

Weakness Type

CWE-79

References