CVE-2021-22192

CRITICAL

9.9

CVSS Severity Score

EPSS Score0.1350%

EPSS Percentile44.89th

Published2021年3月24日

Last Modified2024年11月21日

Vulnerability Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server.

Affected Platforms (CPE)

📦

Gitlab

>= 13.2.0 and < 13.7.9

📦

Gitlab

>= 13.2.0 and < 13.7.9

📦

Gitlab

>= 13.8.0 and < 13.8.6

📦

Gitlab

>= 13.8.0 and < 13.8.6

📦

Gitlab

>= 13.9.0 and < 13.9.4

📦

Gitlab

>= 13.9.0 and < 13.9.4

References & Advisories

🔗 https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22192.json

🔗 https://gitlab.com/gitlab-org/gitlab/-/issues/324452

🔗 https://hackerone.com/reports/1125425

🔗 https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22192.json

🔗 https://gitlab.com/gitlab-org/gitlab/-/issues/324452

🔗 https://hackerone.com/reports/1125425

Vulnerability Description

Affected Platforms (CPE)

Gitlab

Gitlab

Gitlab

Gitlab

Gitlab

Gitlab

References & Advisories

関連する脆弱性情報