Skip to content
OpenAdvisories
Medium · 4.3 CVE-2021-22233 EUVD-2021-9379GHSA-68v6-4gjc-qv2v

An information disclosure vulnerability in GitLab EE versions 13.10 and later allowed a user to read project details

Published Jul 7, 2021 · Updated Aug 3, 2024 · Assigned by GitLab

Vendor: GitLab Product: GitLab Package: gitlab Category: Web / CMS Ecosystem: Ubuntu

Description

An information disclosure vulnerability in GitLab EE versions 13.10 and later allowed a user to read project details

Affected products

VendorProductAffectedFixed
GitLab GitLab >=13.10, <13.11.6, >=13.12, <13.12.6, >=14.0, <14.0.2 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS gitlab No fix yet —

References