VDB

CVE-2021-22181

CVE-2021-22181 PUBLISHED CVSS 6.5 MEDIUM

A denial of service vulnerability in GitLab CE/EE affecting all versions since 11.8 allows an attacker to create a recursive pipeline relationship and exhaust resources.

EPSS 1.06% · 63.2th percentile

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
1.06%
63.2th percentile

Affected Products

VendorProductVersions
Bitnamigitlab11.8.0, 13.11.0, 13.12.0
Bitnamigitlab11.8.0, 13.11.0, 13.12.0

Timeline

  • Jun 2, 2021 CVE Published
  • Jun 12, 2021 EPSS Score
  • Aug 13, 2021 EPSS Score
  • Oct 14, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 13, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Apr 15, 2022 EPSS Score
  • Jun 16, 2022 EPSS Score
  • Oct 17, 2022 EPSS Score
  • Dec 17, 2022 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›