VDB
CVE-2021-22263
CVE-2021-22263
PUBLISHED
CVSS 6.5 MEDIUM
An issue has been discovered in GitLab affecting all versions starting from 13.0 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions starting from 14.2 before 14.2.2. A user account with 'external' status which is granted 'Maintainer' role on any project on the GitLab instance where 'project tokens' are allowed may elevate its privilege to 'Internal' and access Internal projects.
EPSS 1.10% · 63.2th percentile
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
EPSS Score
1.10%
63.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 14.1.0, 14.2.0, 13.0.0 |
| Bitnami | gitlab | 13.0.0, 14.2.0, 14.1.0 |
Timeline
- Jul 1, 2021 CVE Published
- Oct 12, 2021 EPSS Score
- Dec 8, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 31, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 27, 2022 EPSS Score
- Jul 24, 2022 EPSS Score
- Sep 18, 2022 EPSS Score
- Jan 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score