GHSA-9rx5-594g-qxq8
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
Client-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a specially crafted feature flag name to PUT requests on behalf of other users via clicking on a link
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: August 4, 2025 6:39 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.