NetSight
high7.5

CVE-2021-22209

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.8.

Impact

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.8. GitLab was not properly validating authorisation tokens which resulted in GraphQL mutation being executed.

Affected products

VendorProductAffected versions
GitlabGitlab
from 13.8.0 before 13.9.7
from 13.10.0 before 13.10.4
from 13.11.0 before 13.11.2

Weakness classification

References