CVE-2021-22253

Improper authorization in GitLab EE affecting all versions since 13.4 allowed a user who previously had the necessary access to trigger deployments to…

Medium · published August 23, 2021

CVSS v3.1
4.9
EPSS
1%
Percentile
62.1
In the wild
Unconfirmed
What it is

Improper authorization in GitLab EE affecting all versions since 13.4 allowed a user who previously had the necessary access to trigger deployments to protected environments under specific conditions after the access has been removed

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00987 · 62.1th percentile
Published
2021-08-23T19:34Z
EPSS history
Timeline
  • 23 AUG 19:34Z
    Improper authorization in GitLab EE affecting all versions since 13.4 allowed a user who previously had the necessary access to trigger deployments to…
    cvelistv5