Vulnerability Details CVE-2021-22201
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file could read files on the server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.09
EPSS Ranking 92.3%
CVSS Severity
CVSS v3 Score 9.6
CVSS v2 Score 4.0
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22201.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/325562
- https://hackerone.com/reports/1132378
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22201.json
- https://gitlab.com/gitlab-org/gitlab/-/issues/325562
- https://hackerone.com/reports/1132378
Products affected by CVE-2021-22201
-
cpe:2.3:a:gitlab:gitlab:13.10.0
-
cpe:2.3:a:gitlab:gitlab:13.9.0
-
cpe:2.3:a:gitlab:gitlab:13.9.1
-
cpe:2.3:a:gitlab:gitlab:13.9.2
-
cpe:2.3:a:gitlab:gitlab:13.9.3
-
cpe:2.3:a:gitlab:gitlab:13.9.4