CVE-2021-22180: Medium severity gitlab vulnerability
Published Mar 26, 2021
·Updated
An issue has been discovered in GitLab affecting all versions starting from 13.4. Improper access control allows unauthorized users to access details on analytic pages.
Affected Software
6 affected components
GitLab GitLab>=13.6.0<13.6.7
GitLab GitLab>=13.6.0<13.6.7
GitLab GitLab>=13.7.0<13.7.7
GitLab GitLab>=13.7.0<13.7.7
GitLab GitLab>=13.8.0<13.8.4
GitLab GitLab>=13.8.0<13.8.4
Event History
Mar 26, 2021
CVE Published
via MITRE·07:09 PM
Data Sourced
via MITRE·07:09 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-22180?
CVE-2021-22180 is classified as a medium severity vulnerability due to improper access control allowing unauthorized user access.
2
How do I fix CVE-2021-22180?
To fix CVE-2021-22180, upgrade GitLab to version 13.6.8, 13.7.8, or 13.8.5 or later.
3
Which versions of GitLab are affected by CVE-2021-22180?
CVE-2021-22180 affects GitLab versions 13.4 and above, up to version 13.8.4.
4
What type of vulnerability is CVE-2021-22180?
CVE-2021-22180 is an access control vulnerability that allows unauthorized access to analytic pages.
5
Can exploitations of CVE-2021-22180 lead to data breaches?
Yes, the exploitation of CVE-2021-22180 can potentially lead to unauthorized exposure of sensitive analytic information.