Medium severity6.5NVD Advisory· Published Jun 8, 2021· Updated Jun 17, 2026
CVE-2021-22217
CVE-2021-22217
Description
A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker to cause uncontrolled resource consumption with a specially crafted issue or merge request
Affected products
6cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 3 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: <13.10.5
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: <13.10.5
- (no CPE)range: <13.12.2, <13.11.5, <13.10.5
- (no CPE)range: <13.10.5
- Range: <13.12.2, <13.11.5, <13.10.5
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22217.jsonnvdThird Party Advisory
- gitlab.com/gitlab-org/gitlab/-/issues/300709nvdBroken Link
- hackerone.com/reports/1090049nvdPermissions Required
News mentions
0No linked articles in our index yet.