CVE-2021-22245: Input Validation
Published Aug 25, 2021
·Updated
Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in a project impossible to view
Affected Software
6 affected components
GitLab GitLab<13.12.9
GitLab GitLab<13.12.9
GitLab GitLab>=14.0.0<14.0.7
GitLab GitLab>=14.0.0<14.0.7
GitLab GitLab>=14.1.0<14.1.2
GitLab GitLab>=14.1.0<14.1.2
Event History
Aug 25, 2021
CVE Published
via MITRE·06:31 PM
Data Sourced
via MITRE·06:31 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-22245?
CVE-2021-22245 is classified as a medium severity vulnerability.
2
How do I fix CVE-2021-22245?
To fix CVE-2021-22245, users should upgrade to GitLab versions 13.12.9 or higher, or 14.0.7 or higher for affected installations.
3
What impact does CVE-2021-22245 have on GitLab?
CVE-2021-22245 allows an attacker to alter commit authorship, leading to restricted access to project pages.
4
What versions of GitLab are affected by CVE-2021-22245?
CVE-2021-22245 affects GitLab Community and Enterprise editions up to 13.12.8 and several versions within the 14.x range.
5
Is there a workaround for CVE-2021-22245?
There are no official workarounds for CVE-2021-22245; upgrading is recommended for mitigation.