CVE-2021-22198

2021-04-0217:15:12

Google

osv.dev

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.8%

JSON

An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user to delete incident metric images of public projects.

CPENameOperatorVersion
gitlabeq13.8.6-ee
gitlabeq13.8.7-ee
gitlabeq13.8.2-ee
gitlabeq13.8.5-ee
gitlabeq13.8.3-ee
gitlabeq13.8.1-ee
gitlabeq13.8.0-ee
gitlabeq13.8.8-ee
gitlabeq13.8.4-ee

Name	Operator	Version
gitlab	eq	13.8.6-ee
gitlab	eq	13.8.7-ee
gitlab	eq	13.8.2-ee
gitlab	eq	13.8.5-ee
gitlab	eq	13.8.3-ee
gitlab	eq	13.8.1-ee
gitlab	eq	13.8.0-ee
gitlab	eq	13.8.8-ee
gitlab	eq	13.8.4-ee