VYPR
← All advisories
Low severity3.5NVD Advisory· Published Apr 2, 2021· Updated Jun 17, 2026

CVE-2021-22197

CVE-2021-22197

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an infinite loop exist when an authenticated user with specific rights access a MR having source and target branch pointing to each other

Affected products

6
  • GitLab Inc./GitLab4 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 3 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=10.6.0,<13.8.7
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=10.6.0,<13.8.7
    • (no CPE)range: >=10.6
    • (no CPE)range: >=10.6, <13.8.7
  • GitLab Inc./GitLab EE and CEllm-fuzzy
    Range: >=10.6
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 10.6.0, < 13.8.7

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.