Skip to content
OpenAdvisories
Medium · 4.3 CVE-2021-22208 EUVD-2021-9354GHSA-m2g4-fcc3-wp4v

An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7. Improper permission check could allow the change…

Published May 6, 2021 · Updated Aug 3, 2024 · Assigned by GitLab

Description

An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7. Improper permission check could allow the change of timestamp for issue creation or update.

Affected products

VendorProductAffectedFixed
GitLab GitLab >=13.5, <13.9.7 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS gitlab No fix yet —

References