CVE-2021-22237
Under specialized conditions, GitLab may allow a user with an impersonation token to perform Git actions even if impersonation is disabled. This vulne...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Under specialized conditions, GitLab may allow a user with an impersonation token to perform Git actions even if impersonation is disabled. This vulnerability is present in GitLab CE/EE versions before 13.12.9, 14.0.7, 14.1.2
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"13.1.0"},{"fixed":"13.12.9"},{"introduced":"14.0.0"},{"fixed":"14.0.7"},{"introduced":"14.1.0"},{"fixed":"14.1.2"}]}]
Références
- advisory gitlab.com
- report gitlab.com
- web nvd.nist.gov