CVE-2021-22247: Medium severity gitlab vulnerability
Published Aug 25, 2021
·Updated
Improper authorization in GitLab CE/EE affecting all versions since 13.0 allows guests in private projects to view CI/CD analytics
Affected Software
6 affected components
GitLab GitLab>=13.0.0<13.12.9
GitLab GitLab>=13.0.0<13.12.9
GitLab GitLab>=14.0.0<14.0.7
GitLab GitLab>=14.0.0<14.0.7
GitLab GitLab>=14.1.0<14.1.2
GitLab GitLab>=14.1.0<14.1.2
Event History
Aug 25, 2021
CVE Published
via MITRE·06:32 PM
Data Sourced
via MITRE·06:32 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-22247?
CVE-2021-22247 has a medium severity rating as it allows unauthorized access to CI/CD analytics in private projects.
2
How do I fix CVE-2021-22247?
To mitigate CVE-2021-22247, you should upgrade to GitLab versions 13.12.10, 14.0.8, or 14.1.3 or later.
3
Who is affected by CVE-2021-22247?
CVE-2021-22247 affects all versions of GitLab from 13.0 up to 14.1.2.
4
What impact does CVE-2021-22247 have on my GitLab installation?
CVE-2021-22247 allows unauthorized guests to view potentially sensitive CI/CD analytics in private projects.
5
Is CVE-2021-22247 a remote exploit?
Yes, CVE-2021-22247 is a remote exploit that requires no physical access to the GitLab server.