medium5.3
CVE-2021-22167
An issue has been discovered in GitLab affecting all versions starting from 12.1.
Impact
An issue has been discovered in GitLab affecting all versions starting from 12.1. Incorrect headers in specific project page allows attacker to have a temporary read access to the private repository
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | from 12.1.0 before 13.5.6 from 13.6.0 before 13.6.4 from 13.7.0 before 13.7.2 |
References
- NVD record
- CVE.org record
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22167.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/289944
- https://hackerone.com/reports/1043480
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22167.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/289944
- https://hackerone.com/reports/1043480