CVE-2021-22201

Name

CVE-2021-22201

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file could read files on the server.

NVD Severity

medium

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

References

Type	URI
Broken Link	https://gitlab.com/gitlab-org/gitlab/-/issues/325562
Permissions Required	https://hackerone.com/reports/1132378
Vendor Advisory	https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22201.json

Match rules

CPE URI	Source package	Min version	Max version
`cpe:2.3:a:gitlab:gitlab:::::community:::*`	gitlab	>= 13.9.0	<= None

Vulnerable and fixed packages

Source package	Branch	Version	Maintainer	Status