CVE-2021-22243: Medium severity gitlab vulnerability
Published Aug 25, 2021
·Updated
Under specialized conditions, GitLab CE/EE versions starting 7.10 may allow existing GitLab users to use an invite URL meant for another email address to gain access into a group.
Affected Software
6 affected components
GitLab GitLab>=7.10.0<13.12.9
GitLab GitLab>=7.10.0<13.12.9
GitLab GitLab>=14.0.0<14.0.7
GitLab GitLab>=14.0.0<14.0.7
GitLab GitLab>=14.1.0<14.1.2
GitLab GitLab>=14.1.0<14.1.2
Event History
Aug 25, 2021
CVE Published
via MITRE·06:36 PM
Data Sourced
via MITRE·06:36 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-22243?
CVE-2021-22243 is classified as a medium severity vulnerability that can allow unauthorized access to groups.
2
How do I fix CVE-2021-22243?
To mitigate CVE-2021-22243, upgrade GitLab to the latest version that contains the security fix.
3
Which GitLab versions are affected by CVE-2021-22243?
GitLab CE/EE versions from 7.10 to 14.1.2 are affected by CVE-2021-22243.
4
What impact does CVE-2021-22243 have on GitLab users?
CVE-2021-22243 allows existing GitLab users to access groups using invite URLs meant for different email addresses.
5
Is there a known exploit for CVE-2021-22243?
There are no publicly reported exploits specifically targeting CVE-2021-22243, but it poses a security risk if left unpatched.