CVE-2021-22230

CVE-2021-22230 affects GitLab CE/EE from v9.3 through v14.0.2, with the underlying issue: improper code rendering during merge-request rendering that enables submitting malicious code. The connected sources confirm this affects GitLab releases in the 13.x series (notably 13.11.6 and 13.12.6) and ...

CVE-2021-22231

CVE-2021-22231 describes a denial-of-service impacting GitLab CE/EE pages for user profiles, starting with GitLab CE/EE 8.0. The issue allows an attacker to create a specially crafted username to block access to a user’s profile page. Multiple connected sources confirm the vulnerability exists in...

CVE-2021-22231

Removed by vendor...

CVE-2021-22223

Client-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a specially crafted feature flag name to PUT requests on behalf of other users via clicking on a link...

Code injection

Client-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a specially crafted feature flag name to PUT requests on behalf of other users via clicking on a link...

CVE-2021-22223

Client-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a specially crafted feature flag name to PUT requests on behalf of other users via clicking on a link...

CVE-2021-22223

GitLab CE/EE vulnerable to Client-Side code injection via feature flag names (CVE-2021-22223). Affected versions: 11.9 up to before 14.0.2. Root cause: crafted feature flag name allows PUT requests on behalf of other users when a link is clicked. Impact: an attacker could perform actions on behal...

CVE-2021-22223

Removed by vendor...

CVE-2021-22226

Under certain conditions, some users were able to push to protected branches that were restricted to deploy keys in GitLab CE/EE since version 13.9...

Race condition

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.8. Under a special condition it was possible to access data of an internal repository through project fork done by a project member...

CVE-2021-22229

An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.8. Under a special condition it was possible to access data of an internal repository through project fork done by a project member...

CVE-2021-22226

CVE-2021-22226 affects GitLab CE/EE where, under certain conditions, users could push to protected branches restricted to deploy keys. The fixed versions are GitLab 13.11.6, 13.12.6, and 14.0.2 (the issue exists in earlier 13.x/14.x releases). Impact centers on unintended bypass of branch protect...

CVE-2021-22226

Removed by vendor...

CVE-2021-22181

A denial of service vulnerability in GitLab CE/EE affecting all versions since 11.8 allows an attacker to create a recursive pipeline relationship and exhaust resources...

Denial of service

A denial of service vulnerability in GitLab CE/EE affecting all versions since 11.8 allows an attacker to create a recursive pipeline relationship and exhaust resources...

CVE-2021-22181

Removed by vendor...

CVE-2021-22181

CVE-2021-22181 affects GitLab CE/EE, with a denial-of-service risk due to a vulnerability that lets an attacker create a recursive pipeline relationship and exhaust resources in versions dating back to 11.8. Multiple connected sources (OSV, Arch Linux advisory) confirm the issue and point to upst...

CVE-2021-22216

CVE-2021-22216 is a denial-of-service vulnerability in GitLab CE/EE that affects all versions prior to 13.12.2, 13.11.5, or 13.10.5. An attacker can cause uncontrolled resource consumption by supplying a very long issue or merge request description, potentially exhausting server resources. The is...

CVE-2021-22217

A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker to cause uncontrolled resource consumption with a specially crafted issue or merge request...

CVE-2021-22213

A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access token by getting the victim to visit a malicious page with Safari...