CVE-2021-22248

MEDIUM

5.3

Beschreibung

Improper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12 allowed unauthorized users to view some pipeline information for public projects that have access to pipelines restricted to members only

CVE Details

CVSS v3.1 Bewertung5.3

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht8/23/2021

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

gitlab:gitlab

Referenzen

https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22248.json(cve@gitlab.com)

https://gitlab.com/gitlab-org/gitlab/-/issues/336074(cve@gitlab.com)

https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22248.json(af854a3a-2127-422b-91ae-364da2661108)

https://gitlab.com/gitlab-org/gitlab/-/issues/336074(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.