1. CVE-Search
  2. CVE-2021-22239
ID CVE-2021-22239
Summary An unauthorized user was able to insert metadata when creating new issue on GitLab CE/EE 14.0 and later.
References
Vulnerable Configurations
  • cpe:2.3:a:gitlab:gitlab:14.0.0:*:*:*:community:*:*:*
    cpe:2.3:a:gitlab:gitlab:14.0.0:*:*:*:community:*:*:*
  • cpe:2.3:a:gitlab:gitlab:14.0.1:*:*:*:community:*:*:*
    cpe:2.3:a:gitlab:gitlab:14.0.1:*:*:*:community:*:*:*
  • cpe:2.3:a:gitlab:gitlab:14.0.2:*:*:*:community:*:*:*
    cpe:2.3:a:gitlab:gitlab:14.0.2:*:*:*:community:*:*:*
  • cpe:2.3:a:gitlab:gitlab:14.0.3:*:*:*:community:*:*:*
    cpe:2.3:a:gitlab:gitlab:14.0.3:*:*:*:community:*:*:*
  • cpe:2.3:a:gitlab:gitlab:14.0.4:*:*:*:community:*:*:*
    cpe:2.3:a:gitlab:gitlab:14.0.4:*:*:*:community:*:*:*
  • cpe:2.3:a:gitlab:gitlab:14.0.5:*:*:*:community:*:*:*
    cpe:2.3:a:gitlab:gitlab:14.0.5:*:*:*:community:*:*:*
  • cpe:2.3:a:gitlab:gitlab:14.0.6:*:*:*:community:*:*:*
    cpe:2.3:a:gitlab:gitlab:14.0.6:*:*:*:community:*:*:*
  • cpe:2.3:a:gitlab:gitlab:14.0.0:*:*:*:enterprise:*:*:*
    cpe:2.3:a:gitlab:gitlab:14.0.0:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:gitlab:gitlab:14.0.1:*:*:*:enterprise:*:*:*
    cpe:2.3:a:gitlab:gitlab:14.0.1:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:gitlab:gitlab:14.0.2:*:*:*:enterprise:*:*:*
    cpe:2.3:a:gitlab:gitlab:14.0.2:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:gitlab:gitlab:14.0.3:*:*:*:enterprise:*:*:*
    cpe:2.3:a:gitlab:gitlab:14.0.3:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:gitlab:gitlab:14.0.4:*:*:*:enterprise:*:*:*
    cpe:2.3:a:gitlab:gitlab:14.0.4:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:gitlab:gitlab:14.0.5:*:*:*:enterprise:*:*:*
    cpe:2.3:a:gitlab:gitlab:14.0.5:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:gitlab:gitlab:14.0.6:*:*:*:enterprise:*:*:*
    cpe:2.3:a:gitlab:gitlab:14.0.6:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:gitlab:gitlab:14.1.0:*:*:*:community:*:*:*
    cpe:2.3:a:gitlab:gitlab:14.1.0:*:*:*:community:*:*:*
  • cpe:2.3:a:gitlab:gitlab:14.1.1:*:*:*:community:*:*:*
    cpe:2.3:a:gitlab:gitlab:14.1.1:*:*:*:community:*:*:*
  • cpe:2.3:a:gitlab:gitlab:14.1.0:*:*:*:enterprise:*:*:*
    cpe:2.3:a:gitlab:gitlab:14.1.0:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:gitlab:gitlab:14.1.1:*:*:*:enterprise:*:*:*
    cpe:2.3:a:gitlab:gitlab:14.1.1:*:*:*:enterprise:*:*:*
CVSS
Base: 4.0 (as of 21-09-2021 - 14:08)
Impact:
Exploitability:
CWE CWE-863
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:S/C:N/I:P/A:N
Last major update 21-09-2021 - 14:08
Published 09-09-2021 - 15:15
Last modified 21-09-2021 - 14:08
Back to Top