CVE Vulnerabilities

CVE-2021-22208

Published: May 06, 2021 | Modified: Nov 21, 2024
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7. Improper permission check could allow the change of timestamp for issue creation or update.

Affected Software

NameVendorStart VersionEnd Version
GitlabGitlab13.5.0 (including)13.9.7 (excluding)
GitlabUbuntuesm-apps/xenial*
GitlabUbuntuxenial*

References