CVE-2021-22250

Published: Aug 25, 2021Modified: Nov 21, 2024

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: NVD

Description

Improper authorization in GitLab CE/EE affecting all versions since 13.3 allowed users to view and delete impersonation tokens that administrators created for their account

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 13.3.0 to 13.12.9
Gitlab Gitlab	From 14.0.0 to 14.0.7
Gitlab Gitlab	From 14.1.0 to 14.1.2
Gitlab Gitlab	From 13.3.0 to 13.12.9
Gitlab Gitlab	From 14.0.0 to 14.0.7
Gitlab Gitlab	From 14.1.0 to 14.1.2