An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners
Reporter | Title | Published | Views | Family All 13 |
---|---|---|---|---|
![]() | UBUNTU-CVE-2021-22186 | 24 Mar 202117:15 | – | osv |
![]() | CVE-2021-22186 | 24 Mar 202117:15 | – | osv |
![]() | BIT-GITLAB-2021-22186 | 6 Mar 202411:20 | – | osv |
![]() | GitLab CE/EE Authorization Issues Vulnerability | 25 Mar 202100:00 | – | cnvd |
![]() | CVE-2021-22186 | 24 Mar 202100:00 | – | ubuntucve |
![]() | Authorization | 24 Mar 202117:15 | – | prion |
![]() | CVE-2021-22186 | 24 Mar 202116:42 | – | cvelist |
![]() | Incorrect Authorization | 6 Aug 202314:27 | – | veracode |
![]() | CVE-2021-22186 | 24 Mar 202117:15 | – | nvd |
![]() | GitLab 9.4 < 13.7.8 / 13.8 < 13.8.5 / 13.9 < 13.9.2 (CVE-2021-22186) | 17 May 202400:00 | – | nessus |
[
{
"product": "GitLab",
"vendor": "GitLab",
"versions": [
{
"status": "affected",
"version": ">=9.4, <13.7.8"
},
{
"status": "affected",
"version": ">=13.8, <13.8.5"
},
{
"status": "affected",
"version": ">=13.9, <13.9.2"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo