CVE-2021-22192: Code Injection
Published Mar 24, 2021
·Updated
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server.
Affected Software
6 affected components
GitLab GitLab>=13.2.0<13.7.9
GitLab GitLab>=13.2.0<13.7.9
GitLab GitLab>=13.8.0<13.8.6
GitLab GitLab>=13.8.0<13.8.6
GitLab GitLab>=13.9.0<13.9.4
GitLab GitLab>=13.9.0<13.9.4
Event History
Mar 24, 2021
CVE Published
via MITRE·04:36 PM
Data Sourced
via MITRE·04:36 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-22192?
CVE-2021-22192 is considered a critical vulnerability due to its potential to allow unauthorized execution of arbitrary code on the server.
2
How do I fix CVE-2021-22192?
To fix CVE-2021-22192, upgrade GitLab to version 13.7.9 or later, or 13.8.6 or later, or 13.9.4 or later, depending on your current version.
3
What versions of GitLab are affected by CVE-2021-22192?
CVE-2021-22192 affects GitLab CE/EE versions starting from 13.2 up to 13.9.4.
4
Can CVE-2021-22192 be exploited by unauthorized users?
Yes, CVE-2021-22192 can be exploited by unauthorized authenticated users to execute arbitrary code.
5
Is there a patch available for CVE-2021-22192?
Yes, GitLab has released patches for CVE-2021-22192 in the updated versions of their software.