Your submission was sent successfully! Close

CVE-2021-22250

Published: 25 August 2021

Improper authorization in GitLab CE/EE affecting all versions since 13.3 allowed users to view and delete impersonation tokens that administrators created for their account

Priority

Medium

CVSS 3 base score: 5.4

Status

Package Release Status
gitlab
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

trusty Does not exist

upstream Needs triage

xenial Ignored
(out of standard support)