Lucene search

K
osvGoogleOSV:CVE-2021-22263
HistoryOct 11, 2021 - 5:15 p.m.

CVE-2021-22263

2021-10-1117:15:07
Google
osv.dev
4

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.4%

An issue has been discovered in GitLab affecting all versions starting from 13.0 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions starting from 14.2 before 14.2.2. A user account with ‘external’ status which is granted ‘Maintainer’ role on any project on the GitLab instance where ‘project tokens’ are allowed may elevate its privilege to ‘Internal’ and access Internal projects.

CPENameOperatorVersion
gitlabeq14.2.1-ee
gitlabeq14.2.0-ee

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.4%