CVE-2021-22217

Published: Jun 8, 2021Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker to cause uncontrolled resource consumption with a specially crafted issue or merge request

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	Before 13.10.5
Gitlab Gitlab	From 13.11 to 13.11.5
Gitlab Gitlab	From 13.12 to 13.12.2
Gitlab Gitlab	Before 13.10.5
Gitlab Gitlab	From 13.11 to 13.11.5
Gitlab Gitlab	From 13.12 to 13.12.2