CVE-2021-22190

A path traversal vulnerability via the GitLab Workhorse in all versions of GitLab could result in the leakage of a JWT token

High · published April 12, 2021

CVSS v3.1
8.5
EPSS
2%
Percentile
76.1
In the wild
Unconfirmed
What it is

A path traversal vulnerability via the GitLab Workhorse in all versions of GitLab could result in the leakage of a JWT token

The record
Technical detail
CVSS v3.1
8.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01636 · 76.1th percentile
Published
2021-04-12T14:31Z
EPSS history
Timeline
  • 12 APR 14:31Z
    A path traversal vulnerability via the GitLab Workhorse in all versions of GitLab could result in the leakage of a JWT token
    cvelistv5