← Back to CVE List

CVE-2021-22223

Published: 2021-07-06T22:15Z
Last Modified: 2024-11-21T05:49Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Client-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a specially crafted feature flag name to PUT requests on behalf of other users via clicking on a link > MITRE Terms of Use apply – see LICENSE‑MITRE.txt