low3.1
CVE-2021-22211
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.
Impact
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7. GitLab Dependency Proxy, under certain circumstances, can impersonate a user resulting in possibly incorrect access handling.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | from 13.7.0 before 13.9.7 from 13.10.0 before 13.10.4 from 13.11.0 before 13.11.2 |