Unrated severityNVD Advisory· Published Aug 25, 2021· Updated Aug 3, 2024
CVE-2021-22237
CVE-2021-22237
Description
Under specialized conditions, GitLab may allow a user with an impersonation token to perform Git actions even if impersonation is disabled. This vulnerability is present in GitLab CE/EE versions before 13.12.9, 14.0.7, 14.1.2
Affected products
3- Range: <13.12.9, >=14.0: <14.0.7, >=14.1: <14.1.2
- Range: >=13.1, <13.12.9
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22237.jsonmitrex_refsource_CONFIRM
- gitlab.com/gitlab-org/gitlab/-/issues/297516mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.