CVE-2021-22246: High severity gitlab vulnerability
Published Aug 20, 2021
·Updated
A vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11.6. GitLab Webhook feature could be abused to perform denial of service attacks.
Affected Software
6 affected components
GitLab GitLab>=2.0.0<13.11.6
GitLab GitLab>=2.0.0<13.11.6
GitLab GitLab>=13.12.0<13.12.6
GitLab GitLab>=13.12.0<13.12.6
GitLab GitLab>=14.0.0<14.0.2
GitLab GitLab>=14.0.0<14.0.2
Event History
Aug 20, 2021
CVE Published
via MITRE·05:38 PM
Data Sourced
via MITRE·05:38 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-22246?
CVE-2021-22246 is classified as a denial of service vulnerability affecting GitLab versions before 14.0.2, 13.12.6, and 13.11.6.
2
How do I fix CVE-2021-22246?
To fix CVE-2021-22246, you should upgrade to GitLab versions 14.0.2, 13.12.6, or 13.11.6 or later.
3
Which versions of GitLab are affected by CVE-2021-22246?
CVE-2021-22246 affects GitLab Community and Enterprise editions prior to versions 14.0.2, 13.12.6, and 13.11.6.
4
What impact does CVE-2021-22246 have on GitLab users?
The impact of CVE-2021-22246 can result in denial of service attacks that disrupt the availability of GitLab services.
5
Is there any workaround for CVE-2021-22246?
There are no known workarounds for CVE-2021-22246; the recommended action is to upgrade to a fixed version.