NetSight
medium5.3

CVE-2021-22248

Improper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12 allowed unauthorized users to view some pipeline information fo…

Impact

Improper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12 allowed unauthorized users to view some pipeline information for public projects that have access to pipelines restricted to members only

Affected products

VendorProductAffected versions
GitlabGitlab
from 13.12.0 before 13.12.9
from 14.0.0 before 14.0.7
from 14.1.0 before 14.1.2

References