CVEs-PoC/2021/CVE-2021-22225.md

CVE-2021-22225

Description

Insufficient input sanitization in markdown in GitLab version 13.11 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted markdown

POC

Reference

• https://gitlab.com/gitlab-org/gitlab/-/issues/331051
• https://gitlab.com/gitlab-org/gitlab/-/issues/331051

Github

• https://github.com/cokeBeer/goot