MEDIUM

CVE-2021-39906

Gitlab GitLab 2021-11-05 CVSS v3.1

CVSS

6.1

Description

Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaScript code on the victim's behalf.

Summary dbcve.org

GitLab CE/EE versions 13.5 and above fail to properly validate Jupyter notebook (.ipynb) file uploads, allowing malicious JavaScript code to be embedded within the JSON structure of the notebook file. When victims view or interact with these crafted files in GitLab's web interface, the embedded JavaScript executes in their browser context, leading to stored XSS.

Mitigation

Upgrade GitLab to the patched version (consult GitLab's security release notes for the fix version). Alternatively, restrict or disable ipynb file uploads in project settings until patching is feasible.

Weakness (CWE)

CWE-79 Cross-site Scripting (XSS)

EPSS Score

60.73%

Probability of exploitation in next 30 days

99.1th percentile

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39906.json Vendor Advisory https://gitlab.com/gitlab-org/gitlab/-/issues/341566 Broken Link https://hackerone.com/reports/1347600 Permissions Required, Third Party Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE