VULNERABILITY INTELLIGENCE

CVE-2021-22228

CVSS score6.5 MEDIUM

EPSS probability1.71%

CISA KEVNot currently listed

Published2021-07-06

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

An issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 13.12.6, and all versions starting from 14.0 before 14.0.2. Improper access control allows unauthorised users to access project details using Graphql.

Weakness classification

nvd@nist.gov: NVD-CWE-Other

Primary references

cve@gitlab.com — Vendor Advisory
cve@gitlab.com — Exploit, Issue Tracking, Patch, Vendor Advisory
cve@gitlab.com — Exploit, Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Third Party Advisory