mickmick.net

GitLab Multiple Vulnerabilities

Release Date: 28 Feb 2022

RISK: Medium Risk

TYPE: Servers - Other Servers

Multiple vulnerabilities were identified in GitLab. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, sensitive information disclosure, security restriction bypass and remote code execution on the targeted system.

---

Impact

• Denial of Service
• Information Disclosure
• Security Restriction Bypass
• Remote Code Execution

---

System / Technologies affected

• GitLab Community Edition (CE) versions prior to 14.8.2, 14.7.4 and 14.6.5

• GitLab Enterprise Edition (EE) versions prior to 14.8.2, 14.7.4 and 14.6.5

• GitLab Omnibus prior to 14.8

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

• The vendor has issued a fix
  https://about.gitlab.com/releases/2022/02/25/critical-security-release-gitlab-14-8-2-released/

---

Vulnerability Identifier

• CVE-2021-4191
• CVE-2022-0489
• CVE-2022-0549
• CVE-2022-0735
• CVE-2022-0738
• CVE-2022-0741
• CVE-2022-0751

---

Source

• GitLab

---

Related Link

• https://about.gitlab.com/releases/2022/02/25/critical-security-release-gitlab-14-8-2-released/