CVE-2021-22248

MEDIUM

5.3

Description

Improper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12 allowed unauthorized users to view some pipeline information for public projects that have access to pipelines restricted to members only

CVE Details

CVSS v3.1 Score5.3

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published8/23/2021

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

gitlab:gitlab

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22248.json(cve@gitlab.com)

https://gitlab.com/gitlab-org/gitlab/-/issues/336074(cve@gitlab.com)

https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22248.json(af854a3a-2127-422b-91ae-364da2661108)

https://gitlab.com/gitlab-org/gitlab/-/issues/336074(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.