NetSight
IP …
low3.1

CVE-2021-22244

Improper authorization in the vulnerability report feature in GitLab EE affecting all versions since 13.1 allowed a reporter to access vulnerability data

Impact

Improper authorization in the vulnerability report feature in GitLab EE affecting all versions since 13.1 allowed a reporter to access vulnerability data

Affected products

VendorProductAffected versions
GitlabGitlab
from 13.1.0 before 13.12.9
from 14.0.0 before 14.0.7
from 14.1.0 before 14.1.2

References