CVE-2021-22248: Medium severity gitlab vulnerability
Improper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12 allowed unauthorized users to view some pipeline information for public projects that have access to pipelines restricted to members only
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-22248?
CVE-2021-22248 has a medium severity rating due to improper authorization allowing unauthorized access to pipeline information.
How do I fix CVE-2021-22248?
To fix CVE-2021-22248, upgrade your GitLab instance to version 13.12.9 or later, or versions 14.0.7 or later.
Who is affected by CVE-2021-22248?
CVE-2021-22248 affects all GitLab CE and EE versions from 13.12 to 14.1.2, allowing unauthorized users access to pipeline details in public projects.
What is the impact of CVE-2021-22248?
The impact of CVE-2021-22248 is that it enables unauthorized users to view sensitive pipeline information in restricted public projects.
Is CVE-2021-22248 fixed in future GitLab releases?
Yes, CVE-2021-22248 is fixed in subsequent GitLab releases, ensuring that unauthorized access is prevented.