Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2021-22244

Improper authorization in the vulnerability report feature in GitLab EE affecting all versions since 13.1 allowed a reporter to access vulnerability data

Description

Improper authorization in the vulnerability report feature in GitLab EE affecting all versions since 13.1 allowed a reporter to access vulnerability data

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GitLab GitLab

  • >=13.1, <13.12.9affected
  • >=14.0, <14.0.7affected
  • >=14.1, <14.1.2affected

References