Lucene search

K

CVE-2021-22186

🗓️ 24 Mar 2021 17:14:15Reported by GitLabType 
cve
 cve
🔗 web.nvd.nist.gov👁 46 Views

An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners

Show more

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
OSV
UBUNTU-CVE-2021-22186
24 Mar 202117:15
osv
OSV
CVE-2021-22186
24 Mar 202117:15
osv
OSV
BIT-GITLAB-2021-22186
6 Mar 202411:20
osv
CNVD
GitLab CE/EE Authorization Issues Vulnerability
25 Mar 202100:00
cnvd
UbuntuCve
CVE-2021-22186
24 Mar 202100:00
ubuntucve
Prion
Authorization
24 Mar 202117:15
prion
Cvelist
CVE-2021-22186
24 Mar 202116:42
cvelist
Veracode
Incorrect Authorization
6 Aug 202314:27
veracode
NVD
CVE-2021-22186
24 Mar 202117:15
nvd
Tenable Nessus
GitLab 9.4 < 13.7.8 / 13.8 < 13.8.5 / 13.9 < 13.9.2 (CVE-2021-22186)
17 May 202400:00
nessus
Rows per page
Nvd
Vulners
Node
gitlabgitlabRange9.4.013.7.8community
OR
gitlabgitlabRange9.4.013.7.8enterprise
OR
gitlabgitlabRange13.8.013.8.5community
OR
gitlabgitlabRange13.8.013.8.5enterprise
OR
gitlabgitlabRange13.9.013.9.2community
OR
gitlabgitlabRange13.9.013.9.2enterprise
[
  {
    "product": "GitLab",
    "vendor": "GitLab",
    "versions": [
      {
        "status": "affected",
        "version": ">=9.4, <13.7.8"
      },
      {
        "status": "affected",
        "version": ">=13.8, <13.8.5"
      },
      {
        "status": "affected",
        "version": ">=13.9, <13.9.2"
      }
    ]
  }
]

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
24 Mar 2021 17:15Current
4.6Medium risk
Vulners AI Score4.6
CVSS24
CVSS34.9
EPSS0.00145
46
.json
Report