CVE-2021-22252

Published: Aug 23, 2021Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A confusion between tag and branch names in GitLab CE/EE affecting all versions since 13.7 allowed a Developer to access protected CI variables which should only be accessible to Maintainers

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 13.7.0 to 13.12.9
Gitlab Gitlab	From 14.0.0 to 14.0.7
Gitlab Gitlab	From 14.1.0 to 14.1.2
Gitlab Gitlab	From 13.7.0 to 13.12.9
Gitlab Gitlab	From 14.0.0 to 14.0.7
Gitlab Gitlab	From 14.1.0 to 14.1.2