CVE-2021-22208: Medium severity gitlab vulnerability
Published May 6, 2021
·Updated
An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7. Improper permission check could allow the change of timestamp for issue creation or update.
Affected Software
2 affected components
GitLab GitLab>=13.5.0<13.9.7
GitLab GitLab>=13.5.0<13.9.7
Event History
May 6, 2021
CVE Published
via MITRE·01:35 PM
Data Sourced
via MITRE·01:35 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-22208?
CVE-2021-22208 has been classified as a medium severity vulnerability due to its potential to affect the integrity of issue timestamps.
2
How do I fix CVE-2021-22208?
To fix CVE-2021-22208, upgrade GitLab to version 13.9.8 or later.
3
What versions of GitLab are affected by CVE-2021-22208?
CVE-2021-22208 affects GitLab versions from 13.5.0 up to 13.9.7.
4
What impact does CVE-2021-22208 have on GitLab users?
CVE-2021-22208 could allow unauthorized users to modify timestamps for issue creation or updates.
5
Is there a workaround for CVE-2021-22208 if I cannot upgrade GitLab?
There is no official workaround for CVE-2021-22208; upgrading to a patched version is strongly recommended.