p PatchFirst

CVE-2021-22244

CVE-2021-22244

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper authorization in the vulnerability report feature in GitLab EE affecting all versions since 13.1 allowed a reporter to access vulnerability data

CVSS 3.1 · Low · EPSS 1.0%

Published
Updated

Stack: system

Affected products and versions

  • gitlab

    Versions
    • >=13.1, <13.12.9: Affected
    • >=14.0, <14.0.7: Affected
    • >=14.1, <14.1.2: Affected

    No fix published

  • gitlab Ubuntu:16.04:LTS

    Versions
    • 8.4.3+dfsg-9
    • 8.4.3+dfsg-12
    • 8.5.8+dfsg-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →