CVE-2021-22215: High severity gitlab vulnerability
Published Jun 8, 2021
·Updated
An information disclosure vulnerability in GitLab EE versions 13.11 and later allowed a project owner to leak information about the members' on-call rotations in other projects
Affected Software
2 affected components
GitLab GitLab>=13.11.0<13.11.5
GitLab GitLab>=13.12.0<13.12.2
Event History
Jun 8, 2021
CVE Published
via MITRE·03:13 PM
Data Sourced
via MITRE·03:13 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-22215?
The severity of CVE-2021-22215 is classified as medium.
2
How does CVE-2021-22215 impact GitLab users?
CVE-2021-22215 allows project owners to inadvertently disclose sensitive information about members' on-call rotations in other projects.
3
How do I fix CVE-2021-22215?
To fix CVE-2021-22215, upgrade to GitLab versions 13.11.5 or later, or 13.12.2 or later.
4
Which versions of GitLab are affected by CVE-2021-22215?
GitLab Enterprise editions between versions 13.11.0 and 13.11.5, and versions 13.12.0 to 13.12.2 are affected by CVE-2021-22215.
5
Can I mitigate CVE-2021-22215 without an upgrade?
There are no known mitigations for CVE-2021-22215 other than upgrading to a patched version.