VDB

CVE-2021-22234

CVE-2021-22234 PUBLISHED

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.11 before 13.11.7, all versions starting from 13.12 before 13.12.8, and all versions starting from 14.0 before 14.0.4. A specially crafted design image allowed attackers to read arbitrary files on the server.

EPSS 0.17% · 38.3th percentile

Risk Scores

EPSS Score
0.17%
38.3th percentile

Affected Products

VendorProductVersions
Bitnamigitlab13.11.0, 13.12.0, 14.0.0
Bitnamigitlab13.11.0, 13.12.0, 14.0.0

Timeline

  • Jul 1, 2021 CVE Published
  • Aug 6, 2021 EPSS Score
  • Oct 4, 2021 EPSS Score
  • Dec 2, 2021 EPSS Score
  • Jan 30, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 27, 2022 EPSS Score
  • Sep 23, 2022 EPSS Score
  • Nov 21, 2022 EPSS Score
  • Jan 19, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›