Lucene search

K
osvGoogleOSV:CVE-2021-22252
HistoryAug 23, 2021 - 8:15 p.m.

CVE-2021-22252

2021-08-2320:15:13
Google
osv.dev
4

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.0%

A confusion between tag and branch names in GitLab CE/EE affecting all versions since 13.7 allowed a Developer to access protected CI variables which should only be accessible to Maintainers

CPENameOperatorVersion
gitlabeq14.1.1-ee
gitlabeq14.1.0-ee

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.0%