CVE-2020-17530: Code Injection
(updated )
Forced OGNL
evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.
References
Detect and mitigate CVE-2020-17530 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →