CVE-2021-22192 in Community Edition

Résumé

par MITRE • 24/03/2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: GitLab Inc.
• Réserver: 05/01/2021
• Divulgation: 24/03/2021
• Modérer: accepté
• Entrée: VDB-171674
• CPE: prêt
• CWE: CWE-285 (non confirmé)
• CVSS: 8.8 (NVD)
• EPSS: 0.13108
• KEV: non
• Activités: très faible
• Secteur: Insurance, Chemical, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-22192
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-22192
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-22192/