CVE-2021-22245 — Improper Input Validation in Gitlab

CWE-20 — Improper Input Validation6 documents6 sources
Severity
2.7LOWNVD
EPSS
0.4%
top 39.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
GitlabDebian GitlabGitlab CE
Timeline
PublishedAug 25
Latest updateMay 24

Description

Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in a project impossible to view

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:LExploitability: 1.2 | Impact: 1.4

Affected Packages5 packages

▶NVDgitlab/gitlab14.0.0 — 14.0.7+2
▶debiandebian/gitlab< gitlab 15.10.8+ds1-2 (sid)
▶CVEListV5gitlab/gitlab<13.12.9, >=14.0, <14.0.7, >=14.1, <14.1.2+2
▶gitlabgitlab/gitlab

🔴Vulnerability Details

2
GHSA
GHSA-7rmh-fw46-g93m: Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in a project impossible to view↗2022-05-24
▶
OSV
CVE-2021-22245: Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in a project impossible to view↗2021-08-25
▶

📋Vendor Advisories

2
GitLab
CVE-2021-22245: Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in a project impossible to view↗2021-08-25
▶
Debian
CVE-2021-22245: gitlab - Improper validation of commit author in GitLab CE/EE affecting all versions allo...↗2021
▶