VDB

CVE-2021-22262

CVE-2021-22262 PUBLISHED

Missing access control in all GitLab versions starting from 13.12 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 with Jira Cloud integration enabled allows Jira users without administrative privileges to add and remove Jira Connect Namespaces via the GitLab.com for Jira Cloud application configuration page

EPSS 0.16% · 36.0th percentile

Risk Scores

EPSS Score
0.16%
36.0th percentile

Affected Products

VendorProductVersions
Bitnamigitlab13.12.0, 14.1.0, 14.2.0
Bitnamigitlab13.12.0, 14.1.0, 14.2.0

Timeline

  • Jul 1, 2021 CVE Published
  • Oct 6, 2021 EPSS Score
  • Dec 2, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Jan 28, 2022 EPSS Score
  • Mar 25, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 21, 2022 EPSS Score
  • Jul 18, 2022 EPSS Score
  • Sep 13, 2022 EPSS Score
  • Nov 8, 2022 EPSS Score
  • Jan 4, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›