GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 allows XSS in group and profile fields.
{
"cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
"extracted_events": [
{
"introduced": "8.14.0"
},
{
"fixed": "12.3.7"
},
{
"introduced": "12.4.0"
},
{
"fixed": "12.4.4"
},
{
"introduced": "12.5.0"
},
{
"fixed": "12.5.1"
}
],
"source": "CPE_RANGE"
}