GitLab · Report #402658
XSS in request approvals
Validstatus
mediumseverity
$3,000bounty
96upvotes
23 Apr 2021disclosed
How it was found
Hello, team!
I found xss.
Steps to reproduce:
- Open project settings
- paste in this field link777 {F339770}
- click on result {F339772}
In the username, a XSS poc should be written, like mine.
Impact
XSS.