CVE-2021-22248

Improper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12 allowed unauthorized users to view some pipeline information…

Medium · published August 23, 2021

CVSS v3.1
5.3
EPSS
1%
Percentile
64.0
In the wild
Unconfirmed
What it is

Improper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12 allowed unauthorized users to view some pipeline information for public projects that have access to pipelines restricted to members only

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01051 · 64.0th percentile
Published
2021-08-23T19:42Z
EPSS history
Timeline
  • 23 AUG 19:42Z
    Improper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12 allowed unauthorized users to view some pipeline information…
    cvelistv5