CVE-2021-22169: Medium severity gitlab vulnerability
Published Mar 24, 2021
·Updated
An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages.
Affected Software
3 affected components
GitLab GitLab>=13.4.0<13.5.6
GitLab GitLab>=13.6.0<13.6.4
GitLab GitLab>=13.7.0<13.7.2
Event History
Mar 24, 2021
CVE Published
via MITRE·05:03 PM
Data Sourced
via MITRE·05:03 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-22169?
CVE-2021-22169 has a medium severity level due to the potential exposure of internal IP addresses.
2
How do I fix CVE-2021-22169?
To fix CVE-2021-22169, upgrade GitLab to version 13.5.6 or later, or 13.6.4 or later, or 13.7.2 or later.
3
What versions of GitLab are affected by CVE-2021-22169?
CVE-2021-22169 affects GitLab EE versions 13.4.0 to 13.5.6, 13.6.0 to 13.6.4, and 13.7.0 to 13.7.2.
4
What type of information is leaked in CVE-2021-22169?
CVE-2021-22169 leaks internal IP addresses via error messages.
5
Is there a workaround for CVE-2021-22169 if I cannot upgrade?
There is no official workaround for CVE-2021-22169; upgrading is the recommended action.