CVE-2021-22244

Name of the Vulnerable Software and Affected Versions GitLab EE versions 13.1 and later

Description The issue is related to improper authorization in the vulnerability report feature, allowing a reporter to access vulnerability data. This could potentially lead to unauthorized access to confidential data. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.

Recommendations For GitLab EE versions 13.1 and later, update to a version that includes a fix for the improper authorization issue in the vulnerability report feature. At the moment, there is no information about a newer version that contains a fix for this vulnerability.