Design/Logic Flaw

2021-03-2620:15:00

PRIOn knowledge base

www.prio-n.com

4.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

In all versions of GitLab, marshalled session keys were being stored in Redis.

CPENameOperatorVersion
gitlabge13.9.0
gitlablt13.9.2
gitlabge13.9.0
gitlablt13.9.2
gitlabge13.8.0
gitlablt13.8.5
gitlabge13.8.0
gitlablt13.8.5
gitlablt13.7.8
gitlablt13.7.8

Name	Operator	Version
gitlab	ge	13.9.0
gitlab	lt	13.9.2
gitlab	ge	13.9.0
gitlab	lt	13.9.2
gitlab	ge	13.8.0
gitlab	lt	13.8.5
gitlab	ge	13.8.0
gitlab	lt	13.8.5
gitlab	lt	13.7.8
gitlab	lt	13.7.8

References

gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22194.json

gitlab.com/gitlab-org/gitlab/-/issues/262107