CVE-2021-22228: Medium severity gitlab vulnerability
An issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 13.12.6, and all versions starting from 14.0 before 14.0.2. Improper access control allows unauthorised users to access project details using Graphql.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-22228?
CVE-2021-22228 is classified as a moderate severity vulnerability due to improper access control allowing unauthorized access to project details.
How do I fix CVE-2021-22228?
To fix CVE-2021-22228, upgrade GitLab to version 13.11.6, 13.12.6, or 14.0.2 or later.
What systems are affected by CVE-2021-22228?
CVE-2021-22228 affects all versions of GitLab before 13.11.6, from 13.12 to before 13.12.6, and from 14.0 to before 14.0.2.
What types of access does CVE-2021-22228 allow unauthorized users?
CVE-2021-22228 allows unauthorized users to access sensitive project details via GraphQL.
Is there a workaround for CVE-2021-22228?
There is no known effective workaround for CVE-2021-22228 other than upgrading to a secure version.