CVEvulnerability
CVE-2021-22208
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-05-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Description
An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7. Improper permission check could allow the change of timestamp for issue creation or update.
Affected configurations
• gitlab gitlab (>= 13.5.0 < 13.9.7)
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22208.json Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab/-/issues/301212 Broken Link
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22208.json Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab/-/issues/301212 Broken Link