CVE-2021-22167

Published: Jan 15, 2021Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An issue has been discovered in GitLab affecting all versions starting from 12.1. Incorrect headers in specific project page allows attacker to have a temporary read access to the private repository

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 12.1.0 to 13.5.6
Gitlab Gitlab	From 13.6.0 to 13.6.4
Gitlab Gitlab	From 13.7.0 to 13.7.2
Gitlab Gitlab	From 12.1.0 to 13.5.6
Gitlab Gitlab	From 13.6.0 to 13.6.4
Gitlab Gitlab	From 13.7.0 to 13.7.2