CVE Vulnerabilities

CVE-2021-22226

Published: Jul 06, 2021 | Modified: Jul 09, 2021
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS 2.x
4.9 MEDIUM
AV:N/AC:M/Au:S/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

Under certain conditions, some users were able to push to protected branches that were restricted to deploy keys in GitLab CE/EE since version 13.9

Affected Software

Name Vendor Start Version End Version
Gitlab Gitlab 13.9.0 (including) 13.11.6 (excluding)
Gitlab Gitlab 13.12.0 (including) 13.12.6 (excluding)
Gitlab Gitlab 14.0.0 (including) 14.0.2 (excluding)
Gitlab Ubuntu esm-apps/xenial *
Gitlab Ubuntu xenial *

References