An issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1. Open redirects was possible due to framing arbitrary content on any page allowing user controlled markdown
| Software | From | Fixed in |
|---|---|---|
| gitlab / gitlab | - | 15.8.5 |
| gitlab / gitlab | 15.10 | 15.10.1 |
| gitlab / gitlab | 15.9 | 15.9.5 |